Re: oAuth Good Practice

2009-02-19 Thread Paul Kinlan
Hi, Ahh, cool, I actually understood that the access token should be kept as secret as possible, but it is the signing process that really protects the requests as that uses the secret key etc. From a Twitter oAuth point of view (and from what I understand what the plan might be) I just worry,

Re: oAuth Good Practice

2009-02-17 Thread Alex Payne
Our access tokens should be long-lived enough that users shouldn't have to come back to Twitter. Does that answer your question? On Sat, Feb 14, 2009 at 00:39, Paul Kinlan paul.kin...@gmail.com wrote: Hi Guys, I am working developing twe2's oAuth support and I have a quick question for the

oAuth Good Practice

2009-02-16 Thread Paul Kinlan
Hi Guys, I am working developing twe2's oAuth support and I have a quick question for the group. Obviously, oAuth solves us having to store the twitter-ers username and password on our system by delegating the authentication out to twitter, however, for the past couple of services I have