It would be nice if Twitter was an OpenID end point (hint hint).  OpenID
could be used all over the place, but at the same time apps like oneforty
could use this for allowing a user to login.

I know has their own login with twitter thing, but I think it would be nice
to have OpenID so my twitter account could be used on sites that are not
"twitter powered".

Brian Atkinson

On Mon, Sep 28, 2009 at 5:19 PM, JDG <ghil...@gmail.com> wrote:

> Unfortunately, best as I can ascertain, that would violate the OAuth spec
> (I may, of course, be wrong -- I often am :-) ). There are RW tokens and RO
> tokens, but no Auth-only tokens. The best you could hope for, given the
> current state of the spec, would be for an app to simply get, then discard,
> the Access token.
>
> This is a good use case for OAuth, and perhaps should be brought up with
> them as a scenario for future versions of the spec.
>
>
> On Mon, Sep 28, 2009 at 14:47, Jim Renkel <james.ren...@gmail.com> wrote:
>
>>
>> Yes, you can check the "Yes, use Twitter for login", or not. I'm not
>> sure what this does, either way.
>>
>> But you have to select one of the "Read & Write" or "Read-only" radio
>> buttons under the "Default Access type:" heading. There doesn't appear
>> to be any way to turn them both off.
>>
>> So it seems you have always request (and receive) at least read access
>> to the data of user's that authorize your application to act for them on
>> twitter.
>>
>> This is what I and others were trying to point out, and object to: you
>> can't authorize without granting read access.
>>
>> Why authorize without granting read access? Just to verify that they are
>> the twitter user they claim to be, without reading, or writing, any of
>> their data.
>>
>> Jim Renkel
>>
>> -----Original Message-----
>> From: twitter-development-talk@googlegroups.com
>> [mailto:twitter-development-t...@googlegroups.com] On Behalf Of Brian
>> Smith
>> Sent: Monday, September 28, 2009 09:32
>> To: twitter-development-talk@googlegroups.com
>> Subject: [twitter-dev] Re: About the oneforty application directory
>>
>>
>> Dossy Shiobara wrote:
>> > It would be nice if Twitter made "authentication only" as an option
>> for
>> > OAuth.
>>
>> Twitter already has this. It is called "Sign in with Twitter."
>>
>> - Brian
>>
>>
>>
>
>
> --
> Internets. Serious business.
>

Reply via email to