[oauth] Re: Java OAuth Library Exceptions on success?

2009-03-12 Thread raid5
Hey Tane, Did you ever resolve this issue? I'm experiencing similar exceptions when uploading files but it doesn't seem to happen every time. Adam On Jan 20, 2:33 am, Tane Piper wrote: > Hey folks, > > I'm adding some new features to my app - but have had some weird > results recently.  In my n

[oauth] Re: HTTP Status Code 401

2009-03-12 Thread Eran Hammer-Lahav
What HTTP client do you use? EHL On 3/12/09 4:30 PM, "Zhihong" wrote: I added WWW-Authenticate but now it complains unknown scheme. I disabled the HTTP auth and the warnings went away. I am new to OAuth and don't know the reason behind using 401. I just don't see the benefits of overloading

[oauth] Re: HTTP Status Code 401

2009-03-12 Thread Zhihong
I added WWW-Authenticate but now it complains unknown scheme. I disabled the HTTP auth and the warnings went away. I am new to OAuth and don't know the reason behind using 401. I just don't see the benefits of overloading HTTP authentication mechanism. Thanks! Zhihong On Mar 12, 7:27 pm, Eran

[oauth] Re: HTTP Status Code 401

2009-03-12 Thread Eran Hammer-Lahav
No. Return 401 with the WWW-Authenticate header. WWW-Authenticate: OAuth realm="your.server.example.com" EHL On 3/12/09 1:40 PM, "Zhihong" wrote: OAuth spec uses HTTP 401 (Unauthorized) as error code. We just discovered that our HTTP client logs a warning (missing WWW- Authenticate header)

[oauth] HTTP Status Code 401

2009-03-12 Thread Zhihong
OAuth spec uses HTTP 401 (Unauthorized) as error code. We just discovered that our HTTP client logs a warning (missing WWW- Authenticate header) when receiving this status code because it expects HTTP authentication when receiving this code. Considering the special meaning of 401 in HTTP authenti

[oauth] Re: oAuth for single sign-on (as in Flickr->Yahoo!)?

2009-03-12 Thread ankur saxena
No Outh can only be be used to retrieve some feeds and data, based on a Auth-token. which is stored in the Child service Database. The parent Service decides what data should be made available thru Oauth eg : Google Apps gives, Atom based feed of gmail, docs . i.e. Only an xml file can be retrive

[oauth] Re: last call for comments on body signing

2009-03-12 Thread Eran Hammer-Lahav
Thanks Brian. I am going to pick on this spec more than usual because I think it is a very important extension (and because it is my secret mission to make *you* cry). Important enough that I am going to propose it is included in the IETF version as an optional parameter. I want to be able to

[oauth] oAuth for single sign-on (as in Flickr->Yahoo!)?

2009-03-12 Thread R. Rajesh Jeba Anbiah
I'm not sure, but googling doesn't give me any good source--so thought of asking here. Can oAuth be used for single sign-on as exactly used in Flickr->Yahoo! (cross domain and as well as keeping user sessions)? TIA --~--~-~--~~~---~--~~ You received this message

[oauth] last call for comments on body signing

2009-03-12 Thread Brian Eaton
Hi folks - I've neglected the body signing specification for a few months and I'd like to wrap it up. A fresh draft is here: http://oauth.googlecode.com/svn/spec/ext/body_hash/1.0/drafts/3/spec.html Changes: - language cleaned up to be more precise - more detailed example Things that have not

[oauth] Getting Exception: Token invalid - Invalid AuthSub token

2009-03-12 Thread Razak
Hi I tried to fetch my Picasa web account with the Access token and secret which I got got after the OAuth process cycle. I tried to fetch the content using this token&secret but I got error as follows. com.google.gdata.util.ServiceForbiddenException: Forbidden Token invalid - Invalid AuthSub to

[oauth] OAuth IETF Meeting 3/23 1pm San Francisco

2009-03-12 Thread Eran Hammer-Lahav
The OAuth meeting to begin work on standardizing OAuth within the IETF will begin March 23rd at the IETF meeting in San Francisco. For information about the IETF event: http://www.ietf.org/meetings/74/ For information about the OAuth meeting: http://www.ietf.org/proceedings/09mar/agenda/oauth