Re: [oauth] OAuth design for API without users permission

2010-08-06 Thread Lukas Rosenstock
Hi Eric! If there's no user authentication, you can use two-legged OAuth. That means there's only consumer credentials but no token credentials. If the application is not hosted somewhere but deployed and installed at their user's, there's as far as I know no way to securely integrate consumer cr

[oauth] OAuth design for API without users permission

2010-08-02 Thread Eric J. Smith
I am developing an API that will be used by users of my customers. Here is what the flow will look like: - User of my cloud based service creates an API key. - User embeds the API key into their own custom applications. - User deploys the application to their own end users. - The application talks