[twitter-dev] Re: User Streaming API and use of OAuth from web browser

2010-10-07 Thread Jonathon Hill
Have you looked at xAuth? It was designed for desktop clients but it may work well with Javascript clients. Jonathon Hill On Oct 6, 4:54 pm, Tim Bull tim.b...@binaryplex.com wrote: Hi, We are building an application client that is browser based.  We're very comfortable with using OAuth from

Re: [twitter-dev] Re: User Streaming API and use of OAuth from web browser

2010-10-07 Thread Tom van der Woerdt
What? Absolutely not. Desktop applications are already an unsafe way of using OAuth, and JavaScript is even worse. You'd be exposing your Client Secret which is against the rules. Tom On 10/7/10 7:47 PM, Jonathon Hill wrote: Have you looked at xAuth? It was designed for desktop clients but it

Re: [twitter-dev] Re: User Streaming API and use of OAuth from web browser

2010-10-07 Thread Thomas Mango
xAuth is actually for exchanging usernames and passwords for OAuth keys. In the end, all of your requests are still using OAuth. More about xAuth: http://dev.twitter.com/pages/xauth Jonathon Hill wrote: Have you looked at xAuth? It was designed for desktop clients but it may work well with