On 4/26/2010 2:15 PM, Raffi Krikorian wrote:
So in other words if I'm reading this right, it allows the user program
to exchange a username/password combo for the access token and secret
rather than a pin or a redirect from a website in the case of
desktop/mobile and website apps. Nothing else; you can't delete the
account, change the password, etc without the username/pass.
just to be clear - what xAuth is used for is to do a username/password
exchange for an oauth access token / secret (for a given application).
from then on out, that access token and secret is used to sign all
requests in an oauth manner.