Use whatever authentication method you wish,
but here's why we discourage ClientLogin in webappss:

1.) You need to deal with CAPTCHAs

2.) A users credentials are exposed to your app.  From a security
perspective, it's much better for them to input this information on a
Google page rather than a third party app.

3.) ClientLogin tokens expire after ~2weeks.  AuthSub/OAuth tokens
do not expire.

Eric

On Sep 17, 9:52 am, "Mina Ramses" <[EMAIL PROTECTED]> wrote:
> Thanks Eric for your fast reply,
> I know about ClientLogin, but I'm asking if can i use it without any
> problems to build a web application ?
>
>
>
> On Wed, Sep 17, 2008 at 7:46 PM, Eric (Google) <[EMAIL PROTECTED]> wrote:
>
> > As I mentioned, there's ClientLogin.
>
> > Here's the Google Data Overview on it:
> >http://code.google.com/apis/gdata/auth.html#ClientLogin
>
> > and a Java Webmastertools example:
>
> >http://code.google.com/apis/webmastertools/docs/developers_guide_java...
>
> > Eric
>
> > On Sep 17, 9:10 am, "Mina Ramses" <[EMAIL PROTECTED]> wrote:
> > > Hi Eric,
> > > Also i want to ask , if there's no other ways to implement a webmaster
> > tools
> > > web application without using this AuthSub but in a correct way and with
> > no
> > > problems ? i.e bypass the AuthSub authentication by any way.
>
> > > On Fri, Sep 12, 2008 at 11:37 PM, Eric (Google) <[EMAIL PROTECTED]>
> > wrote:
>
> > > > This is only an issue with Webmaster Tools.  Not with the other Data
> > > > APIs.
>
> > > > This is under the general Google Datas issue tracker:
> > > >http://code.google.com/p/gdata-issues/issues/detail?id=678
>
> > > > To answer your last question, it's possible to write a web app
> > > > that uses ClientLogin, but it's strongly discouraged.  Sharing
> > > > a user's credentials in a web app isn't a great idea.
>
> > > > Eric
>
> > > > On Sep 12, 12:23 pm, "Mina Ramses" <[EMAIL PROTECTED]> wrote:
> > > > > I checkedhttp://code.google.com/p/gdata-java-client/issues/list
> > > > > I didn't find anyone with this issue, that's why i'm asking how
> > AuthSub
> > > > > tokens are broken and this is only with webmaster tools api or all
> > google
> > > > > data api ?
> > > > > I think people are working on it , which means they didn't use
> > AuthSub ??
>
> > > > > On Fri, Sep 12, 2008 at 10:13 PM, Mina Ramses <[EMAIL PROTECTED]
>
> > > > wrote:
> > > > > > Did you try the AuthSub ..?, didn't you report it to google support
> > ?
> > > > > > Can i use ClientLogin to work with a webpage ...? or no way ?
>
> > > > > > On Fri, Sep 12, 2008 at 10:08 PM, Eric (Google) <
> > [EMAIL PROTECTED]
> > > > >wrote:
>
> > > > > >> On Sep 12, 12:01 pm, cslinux <[EMAIL PROTECTED]> wrote:
> > > > > >> > So do you mean that i can't yet use AuthSub for webmastertools
> > which
> > > > > >> > means i can't use the api for web application ?
>
> > > > > >> Correct.  Unless you use ClientLogin for now.
>
> > > > > >> > On Sep 12, 9:33 pm, "Eric (Google)" <[EMAIL PROTECTED]>
> > wrote:
>
> > > > > >> > > I would recommend taking a look at the Webmaster Tools
> > Protocol
> > > > Guide:
>
> >http://code.google.com/apis/webmastertools/docs/developers_guide.html
>
> > > > > >> > > And using PHP libcurl:
> > > > > >>http://code.google.com/apis/gdata/articles/using_cURL.html
>
> > > > > >> > > And just a heads up, AuthSub tokens are currently broken with
> > > > > >> > > Webmastertools:
>
> >http://code.google.com/p/gdata-issues/issues/detail?id=678&colspec=AP.
> > > > ..
>
> > > > > >> > > Eric
>
> > > > > >> > > On Sep 12, 10:35 am, cslinux <[EMAIL PROTECTED]> wrote:
>
> > > > > >> > > > I'm asking if i can use php client library with Google
> > webmaster
> > > > > >> tools
> > > > > >> > > > api, cause i only found a reference guide for java, that's
> > why
> > > > I'm
> > > > > >> > > > asking, even the php client lib has no webmaster tool
> > sample, in
> > > > > >> case
> > > > > >> > > > the google webmaster api isn't supported in the php lib,
> > what
> > > > could
> > > > > >> be
> > > > > >> > > > a good start in order to implement the api in php ?
>
> > > > > > Thanks in advance and kind regards.
>
> > > > > > --
> > > > > > |Mina r. Fahmy|
> > > > > > ===============================================================
> > > > > > Key ID: 0x964F ED94 on --keyserverhttp://wwwkeys.eu.pgp.net
> > > > > > Key fingerprint = 35DD 3279 EB3E A711 1205 466F 4B8E 4940 964F ED94
> > > > > > ===============================================================
>
> > > > > Thanks in advance and kind regards.
> > > > > --
> > > > > |Mina r. Fahmy|
> > > > > ===============================================================
> > > > > Key ID: 0x964F ED94 on --keyserverhttp://wwwkeys.eu.pgp.net
> > > > > Key fingerprint = 35DD 3279 EB3E A711 1205 466F 4B8E 4940 964F ED94
> > > > > ===============================================================
>
> > > Thanks in advance and kind regards.
>
> > > --
> > > |Mina r. Fahmy|
> > > ===============================================================
> > > Key ID: 0x964F ED94 on --keyserverhttp://wwwkeys.eu.pgp.net
> > > Key fingerprint = 35DD 3279 EB3E A711 1205 466F 4B8E 4940 964F ED94
> > > ===============================================================
>
> Thanks in advance and kind regards.
>
> --
> |Mina r. Fahmy|
> ===============================================================
> Key ID: 0x964F ED94 on --keyserverhttp://wwwkeys.eu.pgp.net
> Key fingerprint = 35DD 3279 EB3E A711 1205 466F 4B8E 4940 964F ED94
> ===============================================================
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Data Protocol" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/google-help-dataapi?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to