I think you're missing the point, Taylor. It's not a matter of validation, but actually being able to copy such a long string. I have trouble with this on mobile, and I think I'm a pretty savvy user. I *guarantee* you the rate of failure, and giving up on the process entirely, will be much higher than current auth.
I can't code some way to sit over the user's shoulder and tell them "click this, now click that, now spread your fingers… a bit wider…" -- Ed Finkler http://funkatron.com @funkatron AIM: funka7ron / ICQ: 3922133 / XMPP:[email protected] > Some users might screw up the copy & paste step. Code defensively. Scrub the > input. Verify that it's in the format you think it should be before assuming > it's correct. After you parse the tokens, do a verify_credentials API > requests or something similar to test if it works. If it doesn't work, try > sending the user through the process again (they'll get the same result as > the first time).
