[oauth] Re: Confused about oauth

2008-12-31 Thread Nomi
Hi All, I am going to implement OAuth protocol in my desktop application (consumer) with a web service(service provider) but i am confused that how service provider redirect user back to consumer with authenticated request token. i.e. how can i get that authenticated request token and come to know

[oauth] Re: Confused about oauth

2008-12-24 Thread Joe Bowman
Thanks for the all the responses and help. The projects at work to combine openid and oauth are interested. However, I'm also bound by what the providers I choose to work with support. What I've found is that Yahoo provides an optional parameter as Krishna described above. I've left a note on the

[oauth] Re: Confused about oauth

2008-12-23 Thread Krishna Sankar (ksankar)
John mentioned, an OAuth extension specification could be a good idea. Cheers From: oauth@googlegroups.com [mailto:oa...@googlegroups.com] On Behalf Of Chris Messina Sent: Tuesday, December 23, 2008 12:10 PM To: oauth@googlegroups.com Subject: [oauth] Re: Confused about oauth I

[oauth] Re: Confused about oauth

2008-12-23 Thread Chris Messina
I would also point you to the Step2 work underway to help harmonize OAuth & OpenID: http://step2.googlecode.com Chris On Mon, Dec 22, 2008 at 6:12 PM, Joe Bowman wrote: > > I'm interested in using oauth for a site I'm working on, but I'm a bit > confused about one thing. Does the oauth protocol

[oauth] Re: Confused about oauth

2008-12-23 Thread Zsombor Szabó
OpenID: - authentication protocol. The user is authenticated. OAuth - authorization protocol. The user authorizes a consumer in a manner that his/her credentials remain unknown for the consumer (application). So OAuth is a way for an application (web or desktop) to interact with an API of

[oauth] Re: Confused about oauth

2008-12-23 Thread Chris Messina
I can't give you a technical answer for this, but no, OpenID does identity (and claimed identifiers), whereas OAuth substitutes a token and consumer key for username and password. That said, you essentially identify requests by the consumer key, and allow them through if they're signed with the pro