On Wed, Sep 23, 2009 at 12:11 PM, Paul Lindner <lind...@inuus.com> wrote: > The docs describe it as 'The URL being used by the current request' > > I assume this means the container specific URL in use for a given security > token, right? > > For example if I display an app on http://example.com/app1/canvas then I > should store this URL in the activeUrl field in the security token. This is > then used by the oauth proxy to construct a callback to the the callback, > right?
It's actually the URL of the request. For example, for a security token that arrives with a gadgets.io.makeRequest request, it would be http://randomstring.amodules.com/gadgets/makeRequest. This doesn't change the size of the token at all, the value is dynamic. Cheers, Brian