[twitter-dev] Re: How to use Twitter to sign out ? calling to end_session does not work

2009-07-29 Thread Abraham Williams
account/end_session will not do anything with the user on your site. It
should log them out of twitter.com but the use case is very limited and I
don't think it gets used/tested very often.

To log someone out of your own site you have to delete the
sessions/cookies/etc that you are using to keep them logged in. For example
in PHP session_destroy(); will accomplish this.

If the account 1) has already approved your application and 2) is currently
signed into twitter.com since you are using oauth/authenticate they will not
even appear to visit twitter.com. They will just automagically get logged
in.

Abraham

On Tue, Jul 28, 2009 at 22:21, CG learn@gmail.com wrote:


 Hi, I am developing a simple Web App that use sign in with twitter ,
 where the app will automatically redirect to
 twitter.com/oauth/authenticate(with request token/secret of course) if
 user is not authenticated.

 It works well until I need to add a sign out function in my App.

 I use the end_session API and I get an error Logged out. which I
 think actually is loggout successfully (I came across a ticket
 mentioning about this)

 I thought that after signing out from my app, when I revisit the
 same page , I supposed to be redirect to the sign in page but
 unfortunately , it seems like successfully authenticate me and
 redirect back to my app without required any authentication.

 I did a test on this by calling to end_session , and go to another
 browser tab , to access www.twitter.com , it seems like I am still not
 sign out from Twitter ..

 Anybody face this problem ? what is the solution for this ? without
 this function , my app is useless , because user can only sign out at
 twitter.com or clear the cache/cookie in browser.

 Cheers .
   CG




-- 
Abraham Williams | Community Evangelist | http://web608.org
Hacker | http://abrah.am | http://twitter.com/abraham
Project | http://fireeagle.labs.poseurtech.com
This email is: [ ] blogable [x] ask first [ ] private.


[twitter-dev] Re: How to use Twitter to sign out ? calling to end_session does not work

2009-07-29 Thread Andres B

I think the question refers to the force_login oauth parameter.
What I think CG wants it to log users out of Twitter, so when the app
asks for authentication, the user is forced to log in TO TWITTER
again.
If that is the case: 
http://apiwiki.twitter.com/Twitter-REST-API-Method%3A-oauth-authenticate

G'luck,
Andres B
@andresb

On Jul 28, 11:19 pm, CG learn@gmail.com wrote:
 hi , thx for reply ..

 my app will actually do the following thing

 1. get a new request token  secret (or should I use the old requeust token ?)
 2. redirect user to the authenticate URL
 (twitter.com/oauth/authenticate?x) with the request token  secret

 At this moment , Twitter will do the authentication , and
 successfully authenticate me (even I hv call the end_session) ..

 I do not even pass any oauth token and secret at this stage ..

 CG

 On Wed, Jul 29, 2009 at 11:41 AM, Duane

 Roelandsduane.roela...@gmail.com wrote:

  I'm not familiar with End_Session, but couldn't you just clear the
  OAuth Token and TokenSecret?  That would effectively sign you out
  because you'd need to reauthenticate.

  On Jul 28, 11:21 pm, CG learn@gmail.com wrote:
  Hi, I am developing a simple Web App that use sign in with twitter ,
  where the app will automatically redirect to
  twitter.com/oauth/authenticate(with request token/secret of course) if
  user is not authenticated.

  It works well until I need to add a sign out function in my App.

  I use the end_session API and I get an error Logged out. which I
  think actually is loggout successfully (I came across a ticket
  mentioning about this)

  I thought that after signing out from my app, when I revisit the
  same page , I supposed to be redirect to the sign in page but
  unfortunately , it seems like successfully authenticate me and
  redirect back to my app without required any authentication.

  I did a test on this by calling to end_session , and go to another
  browser tab , to accesswww.twitter.com, it seems like I am still not
  sign out from Twitter ..

  Anybody face this problem ? what is the solution for this ? without
  this function , my app is useless , because user can only sign out at
  twitter.com or clear the cache/cookie in browser.

  Cheers .
    CG


[twitter-dev] Re: How to use Twitter to sign out ? calling to end_session does not work

2009-07-28 Thread Duane Roelands

I'm not familiar with End_Session, but couldn't you just clear the
OAuth Token and TokenSecret?  That would effectively sign you out
because you'd need to reauthenticate.

On Jul 28, 11:21 pm, CG learn@gmail.com wrote:
 Hi, I am developing a simple Web App that use sign in with twitter ,
 where the app will automatically redirect to
 twitter.com/oauth/authenticate(with request token/secret of course) if
 user is not authenticated.

 It works well until I need to add a sign out function in my App.

 I use the end_session API and I get an error Logged out. which I
 think actually is loggout successfully (I came across a ticket
 mentioning about this)

 I thought that after signing out from my app, when I revisit the
 same page , I supposed to be redirect to the sign in page but
 unfortunately , it seems like successfully authenticate me and
 redirect back to my app without required any authentication.

 I did a test on this by calling to end_session , and go to another
 browser tab , to accesswww.twitter.com, it seems like I am still not
 sign out from Twitter ..

 Anybody face this problem ? what is the solution for this ? without
 this function , my app is useless , because user can only sign out at
 twitter.com or clear the cache/cookie in browser.

 Cheers .
   CG


[twitter-dev] Re: How to use Twitter to sign out ? calling to end_session does not work

2009-07-28 Thread CG

hi , thx for reply ..

my app will actually do the following thing

1. get a new request token  secret (or should I use the old requeust token ?)
2. redirect user to the authenticate URL
(twitter.com/oauth/authenticate?x) with the request token  secret


At this moment , Twitter will do the authentication , and
successfully authenticate me (even I hv call the end_session) ..


I do not even pass any oauth token and secret at this stage ..


CG


On Wed, Jul 29, 2009 at 11:41 AM, Duane
Roelandsduane.roela...@gmail.com wrote:

 I'm not familiar with End_Session, but couldn't you just clear the
 OAuth Token and TokenSecret?  That would effectively sign you out
 because you'd need to reauthenticate.

 On Jul 28, 11:21 pm, CG learn@gmail.com wrote:
 Hi, I am developing a simple Web App that use sign in with twitter ,
 where the app will automatically redirect to
 twitter.com/oauth/authenticate(with request token/secret of course) if
 user is not authenticated.

 It works well until I need to add a sign out function in my App.

 I use the end_session API and I get an error Logged out. which I
 think actually is loggout successfully (I came across a ticket
 mentioning about this)

 I thought that after signing out from my app, when I revisit the
 same page , I supposed to be redirect to the sign in page but
 unfortunately , it seems like successfully authenticate me and
 redirect back to my app without required any authentication.

 I did a test on this by calling to end_session , and go to another
 browser tab , to accesswww.twitter.com, it seems like I am still not
 sign out from Twitter ..

 Anybody face this problem ? what is the solution for this ? without
 this function , my app is useless , because user can only sign out at
 twitter.com or clear the cache/cookie in browser.

 Cheers .
   CG