[OpenSocial] Re: Are all parameters signed?

2009-03-10 Thread Sanjay
Quite needed pattern. Thanks a lot! Sanjay --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "OpenSocial Application Development" group. To post to this group, send email to opensocial-api@googlegroups.com To unsubscr

[OpenSocial] Re: Authentication in OpenSocial

2009-03-10 Thread dburns
Arne, You're right, I could roll my own interface from Flash directly to my server, but then I lose the authentication of (at least) the user id etc that the container can vouch for when using the makeRequest method. I believe that intercepting the Flash-to-server communication is a bit tricker

[OpenSocial] Re: Open Social Software

2009-03-10 Thread Rick
Thanks :) On Mar 10, 3:31 pm, Chris Chabot wrote: > Opensocial.org uses Ning as a social platform, seehttp://www.ning.com/for > details. > > On Tue, Mar 10, 2009 at 8:17 PM, Rick wrote: > > > I apologize if I posted this in the wrong place.  However... > > > I noticed that knitpicks.com uses th

[OpenSocial] Re: Load JavaScript

2009-03-10 Thread Felipe Oliveira
Robson, Thanks, tried the code a bit and is working normally now. But now I have another problem, my application is not displayed on profile, and through other e-mails and also by the development blog, I read that this option has been temporarily disabled by Orkut, in this case, there is some ano

[OpenSocial] Re: Open Social Software

2009-03-10 Thread Chris Chabot
Opensocial.org uses Ning as a social platform, see http://www.ning.com/ for details. On Tue, Mar 10, 2009 at 8:17 PM, Rick wrote: > > I apologize if I posted this in the wrong place. However... > > I noticed that knitpicks.com uses the opensocial API, but their > software looks identical to the

[OpenSocial] Re: Load JavaScript

2009-03-10 Thread Robson Dantas
Felipe, Call the javascript files using full path, including domain. Example: common/js/jquery.js change to http://www.mydomain.com/path/common/js/jquery.js . Let me know if you have any doubt. -Robson 2009/3/9 Felipe Oliveira > Hi Robson, > > Following example of code (xml). > > Tomorrow I

[OpenSocial] Open Social Software

2009-03-10 Thread Rick
I apologize if I posted this in the wrong place. However... I noticed that knitpicks.com uses the opensocial API, but their software looks identical to the software on opensocial.org. Is there a licensed version or something I could purchase to use on my own website? Thanks, Rick --~--~---

[OpenSocial] Re: Load JavaScript

2009-03-10 Thread davi alves
Hello,   See the following, javascript runs on any browser that happens is the reading from the corespondencia explore the mozzila has aleitura dynamics that can quickly read the codes of the system but do not worry, now you just need to host your system and it will rotate normally on any other co

[OpenSocial] Re: Authentication in OpenSocial

2009-03-10 Thread Arne Roomann-Kurrik
Passing data from Flash to JavaScript and then to makeRequest will work, but it's possible that you could find another way to transmit data, especially since Flash can set up socket connections of its own. I'm unfamiliar with the Facebook case, can you elaborate a little more on what parameters a

[OpenSocial] Re: Are all parameters signed?

2009-03-10 Thread Arne Roomann-Kurrik
Yes, I would not use makeRequest to transmit credit card information - your best bet is to open an iframe to a https-protected payment form. You can use makeRequest to establish a session, though. Basically, do a signed makeRequest call to http://yoursite.com/getsession which should validate the

[OpenSocial] Re: Are all parameters signed?

2009-03-10 Thread Sanjay
> So for sensitive information like credit card details, using https is still > required since you don't only want to make sure it hasn't been changed in > transit, you also want to make sure no one can read it, which is what https > gives you. A vital input for me. Thanks a lot! --~--~-

[OpenSocial] Re: Are all parameters signed?

2009-03-10 Thread Chris Chabot
The OAuth signature gives you the security that the request hasn't been tampered with in transit (so called man-in-the-middle attacks). However it doesn't encrypt the data it is sending. So for sensitive information like credit card details, using https is still required since you don't only want t

[OpenSocial] Re: Public key for Google Friend Connect container

2009-03-10 Thread Videomap
Ok Kurrik the key work. thank you very much.The next step i hope , integration with google talk and the ability to send messages between users. On 9 Mar, 20:49, Arne Roomann-Kurrik wrote: > Sorry that we haven't gotten documentation for this out sooner.  The > followingkeyshould work: > > -B

[OpenSocial] Re: Are all parameters signed?

2009-03-10 Thread Sanjay Patel
Hi Arne, Thanks a lot for this vital input. This is a great question. Technically, the entire request url and > post body are signed. You can verify that any parameters in the > request are exactly what was passed to the container via the > makeRequest call, or added by the container itself.

[OpenSocial] What are the steps for making a flex app opensocial?

2009-03-10 Thread khttang
Hello OpenSocial gurus, Based on my reading on opensocial, it seems that we can embed a flash player object inside the gadget specification xml. The flash player can points to a different location where bits and pieces required to run the flex app can be hosted. What about accessing the APIs