First, let me explain my scenario I'm writing an app that will run in an embedded device where there's no web browser to let the user log in Google web site. The user will log supplying his/her orkut user name and password to my application and once logged in, my installed application will show his profile, list of messages, friends etc. So my application will carry out all the authentication in a transparent way to the user - this is what we want.
What I have done so far: Following a lot of information that I got and based on the fact that my installed app will handle the login, I'm using 2 legged authentication (I cant use 3 legged as I dont have a web browser to redirect the user) I created a simple gadget at google using this link http://code.google.com/apis/gadgets/docs/tools.html#GGE and I verify it in that place https://www.google.com/gadgets/directory/verify I've got now my oauth consumer key and oauth consumer secret. With this data in hand I'm trying to authenticate the user executing these steps: 1 - Client login - https://www.google.com/accounts/ClientLogin 2 - Get the auth token and add it in the Authorization HTTP header 3 - I using the consumer key/secret I send a POST to http://www.orkut.com/social/rpc with the below params in the url: oauth_body_hash=f1LPHao4aUX2AIpiYeLKSVdivPw %3D&oauth_nonce=54821382&oauth_timestamp=1266496723&oauth_consumer_key=orkut.com %3A111111111111&oauth_signature_method=HMAC- SHA1&oauth_version=1.0&oauth_signature=x8j9zrWJ%2FbW8fS9qQsBuHDexpDo%3 I'm sending a simple json message {"method": "people.get"} to get basic information. The answer that I get back from the server is: {"id":"myself","error":{"message":"forbidden: Get profile permission denied.","data":{"errorType":"noPermissions"},"code":403}} What's is wrong? Can I authenticate a user in the way I'm doing? As I said, I don't have a web browser and 3-legged authentication is virtually not an alternative! Please I appreciate any help Regards, -- You received this message because you are subscribed to the Google Groups "Orkut Developer Forum" group. To post to this group, send email to opensocial-or...@googlegroups.com. To unsubscribe from this group, send email to opensocial-orkut+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/opensocial-orkut?hl=en.
