Re: BlobCrypterSecurityToken.java question

2009-08-11 Thread Amit Murthy
Thanks. I was under the mistaken impression that the the token format is sort of cast in stone. And for some time was confused by the differing formats between BlobCrypter and BasicCrypter! Amit On Mon, Aug 10, 2009 at 10:15 PM, Brian Eaton wrote: > On Mon, Aug 10, 2009 at 12:18 AM, Amit Mur

Re: BlobCrypterSecurityToken.java question

2009-08-10 Thread Brian Eaton
On Mon, Aug 10, 2009 at 12:18 AM, Amit Murthy wrote: > Could someone please explain why the BlobCrypterSecurityToken does not > return the actual AppId? And why isn't the AppId part of the encrypted > token? Can you can extend that token in arbitrary ways; if you want to distinguish between app-id

BlobCrypterSecurityToken.java question

2009-08-10 Thread Amit Murthy
Hi, Could someone please explain why the BlobCrypterSecurityToken does not return the actual AppId? And why isn't the AppId part of the encrypted token? Code snippet from BlobCrypterSecurityToken.java // Legacy value for signed fetch, opensocial 0.8 prefers opensocial_app_url public String g