[twitter-dev] Proof of identity rather than authorization

2009-03-21 Thread GraemeF
I have an application that does not need access to anything in or do anything to a Twitter account, it just wants proof that the user owns the account. This doesn't seen to fit with OAuth; the app needs proof of identity rather than authorization, so in fact OpenID would be more suitable than OAut

[twitter-dev] Re: Proof of identity rather than authorization

2009-03-22 Thread GraemeF
Hi Elliott, This scenario worked well with basic authentication; you could just delegate the login to Twitter. Now I don't see a way to do it without requiring the user to create another account so that the token can be associated with it. I haven't got that far myself, but I think you're missing

[twitter-dev] Re: Proof of identity rather than authorization

2009-03-22 Thread GraemeF
nID. Sorry to hijack your > thread, but I think we're after the same thing. > > Thanks, > Elliott > > On Mar 21, 11:35 am, GraemeF wrote: > > > I have an application that does not need access to anything in or do > > anything to a Twitter account, it just wants p

[twitter-dev] Re: Proof of identity rather than authorization

2009-03-26 Thread GraemeF
If they have to log in before you request authorization, can't you just store the token with the login credentials (in your db) and use it next time? G. On Mar 25, 8:19 pm, Elliott Kember wrote: > Well, I've had it working for a while now using Rails. All this > solution needs is an "Always aut

[twitter-dev] Re: Proof of identity rather than authorization

2009-04-18 Thread GraemeF
I think we're getting some movement on this - see this thread: http://groups.google.com/group/twitter-development-talk/browse_thread/thread/73524da521d3081c?hl=en Cheers, G.