Re: [twitter-dev] Twitter Fail Whale All Morning

2010-06-09 Thread Ryan Alford
I've been getting it all morning. Ryan On Wed, Jun 9, 2010 at 12:08 PM, Ron B wrote: > Is anyone else hearing complaints about Twitter Fail Whale popping up > practically continuously all morning? >

Re: [twitter-dev] how do we get the via on Tweets

2010-03-10 Thread Ryan Alford
You have to use OAuth. http://apiwiki.twitter.com/FAQ#HowdoIget“fromMyApp”appendedtoupdatessentfrommyAPIapplication Ryan On Wed, Mar 10, 2010 at 4:02 PM, pranzb wrote: > Hello all, > > I wanted to kn

Re: [twitter-dev] Pin-based authorization via .NET

2010-03-07 Thread Ryan Alford
Why are you using PIN based authorization for web applications? Web applications don't use PINs. Ryan Sent from my DROID On Mar 7, 2010 4:59 PM, "Ricky" wrote: I'm working on version 2 of Twitterizer, a .NET library for using the Twitter API, but I've run into a weird issue with pin-based OAu

Re: [twitter-dev] Re: OAuth newbie question

2010-03-06 Thread Ryan Alford
The token is a posted parameter. The secret is part of the key for the signature. Ryan On Sat, Mar 6, 2010 at 5:55 PM, IDOLpeeps wrote: > I've overcome the nuances of generating the oauth signature. It > shocks me that the API documentation provides no clear indication of > how to send the to

Re: [twitter-dev] Re: OAuth Rate Limit Increase - Not seeing it

2010-03-04 Thread Ryan Alford
Thanks Ryan Sent from my DROID On Mar 4, 2010 5:41 AM, "Nik Fletcher" wrote: Hi Guys http://code.google.com/p/twitter-api/issues/detail?id=1501 Cheers -N On Mar 3, 9:42 pm, Milen wrote: > I couldn't agree more, it's pretty l...

Re: [twitter-dev] Re: OAuth Rate Limit Increase - Not seeing it

2010-03-03 Thread Ryan Alford
mit, which brings the previous scenario into play. Thanks, Ryan On Wed, Mar 3, 2010 at 9:44 AM, Ryan Alford wrote: > I was able to get that working. I didn't notice that those headers were > only sent for requests that counted against the rate limit. > > Ryan > > > On

Re: [twitter-dev] Re: OAuth Rate Limit Increase - Not seeing it

2010-03-03 Thread Ryan Alford
I was able to get that working. I didn't notice that those headers were only sent for requests that counted against the rate limit. Ryan On Tue, Mar 2, 2010 at 6:33 PM, twittelator wrote: > I reported this bug yesterday. Instead of making that extra call, why > not look at the response headers

Re: [twitter-dev] Re: OAuth rate limit question

2010-03-03 Thread Ryan Alford
Just to add, I also get the 150 rate limit when using the account/rate_limit_status method. I am using OAuth and api.twitter.com. Ryan On Wed, Mar 3, 2010 at 8:57 AM, Raffi Krikorian wrote: > Well - it seems to me that rate limit status may have an issue with it. We > will have to take a look

Re: [twitter-dev] Re: forcing api.twitter.com resources - tomorrow

2010-03-02 Thread Ryan Alford
com), will stick with > twitter.com. > > > On Tue, Mar 2, 2010 at 1:23 PM, Dewald Pretorius > wrote: > >> Raffi, >> >> Can you please clarify how and/or if OAuth will be affected. >> >> My OAuth token and authorize requests also go to twitter.com, no

Re: [twitter-dev] forcing api.twitter.com resources - tomorrow

2010-03-02 Thread Ryan Alford
Does OAuth go to the api.twitter.com? The API documentation still has the 4 OAuth methods going to twitter.com. http://apiwiki.twitter.com/Twitter-REST-API-Method:-oauth-request_token http://apiwiki.twitter.com/Twitter-REST

Re: [twitter-dev] Re: 401 - Unauthorized error when diacritics in status

2010-02-23 Thread Ryan Alford
y C# twitter app. The post I made is here: > > > http://groups.google.com/group/twitter-development-talk/browse_thread/thread/ef11efdd0a9cf194/6950ce9721a48609#6950ce9721a48609 > > > On Feb 23, 2:13 pm, Ryan Alford wrote: > > I think it is the way that .Net handles encoding

Re: [twitter-dev] 401 - Unauthorized error when diacritics in status

2010-02-23 Thread Ryan Alford
- if you have a way to replicate this, and you are > confident its not your oauth libraries, then please let me know. > > > On Tue, Feb 23, 2010 at 11:04 AM, Ryan Alford wrote: > >> I believe it has been fixed in some libraries in other programming >> languages, but

Re: [twitter-dev] 401 - Unauthorized error when diacritics in status

2010-02-23 Thread Ryan Alford
I believe it has been fixed in some libraries in other programming languages, but I can't figure out how to do it in .Net. Ryan On Tue, Feb 23, 2010 at 12:38 PM, Aral Balkan wrote: > Ooh, if this is the case then it will definitely stop me from using oAuth > for Feathers (http://feathersapp.com

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
The documentation for the 4 OAuth methods do not show the versioning URL. I didn't know if they were moved over or not. Ryan Sent from my DROID On Feb 22, 2010 2:08 PM, "Raffi Krikorian" wrote: the API wiki docs were painstakingly converted to use the api.twitter.com/1endpoint. if you spot a

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
22, 2010, at 9:42 AM, Ryan Alford wrote: > Yes, those are the ones I am talking about. > >...

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
t; > we haven't set a deprecation date for those yet - but developers should > plan on it. please start to migrate to the api.twitter.com/1/ URLs. > > > On Mon, Feb 22, 2010 at 9:26 AM, Ryan Alford wrote: > >> Raffi, >> >> Just so you know, "http://twitter.c

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
m works without /1, then > that's inadvertent, and we'll probably "fix" that. > > > On Mon, Feb 22, 2010 at 9:18 AM, Ryan Alford wrote: > >> I *believe* Twitter is moving to "versioning" the API(which is what the >> "/1/" mean

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
I *believe* Twitter is moving to "versioning" the API(which is what the "/1/" means..it's version 1). So I would use the URL with the "/1/", since the other way be deprecated in the future. Ryan On Mon, Feb 22, 2010 at 11:19 AM, Dmitri Snytkine wrote: > Is there a difference between using > htt

Re: [twitter-dev] Re: Oauth Signatures

2010-02-18 Thread Ryan Alford
27;m not normalizing at this > point. It's just now and again that Twitter says 401 Invalid signature > on a status update. So, I wondering if the text has some strange > characters that cause a discrepancy between my sig calc and their sig > check. > > On Feb 18, 3:13 pm, Ryan

Re: [twitter-dev] Oauth Signatures

2010-02-18 Thread Ryan Alford
I just tried it and I do get the 401 Unauthorized error when I don't normalize the status text. Ryan On Thu, Feb 18, 2010 at 1:07 PM, Dewald Pretorius wrote: > Can computing the OAuth signature on un-normalized tweet text cause > Incorrect Signature issues? >

Re: [twitter-dev] Re: oauth request token failing

2010-02-18 Thread Ryan Alford
ethod%3DHMAC-SHA1%26oauth_timestamp > %3D1266501208%26oauth_version%3D1.0 > > On Feb 18, 8:04 am, Ryan Alford wrote: > > Can you post the string that you hash to create the signature? > > > > Ryan > > > > On Thu, Feb 18, 2010 at 8:42 AM, Berto wrote: > &

Re: [twitter-dev] Re: oauth request token failing

2010-02-18 Thread Ryan Alford
uth_timestamp=1266500348&oauth_version=1.0&oauth_signature=eGALeAVpxt4CB%2FuHfkLq51%2FWXRk%3D > > It still fails for me. I've gotta be missing something obvious. Does > anything need to go into my header? > > On Feb 17, 9:47 pm, Ryan Alford wrote: > > You

Re: [twitter-dev] Re: oauth request token failing

2010-02-17 Thread Ryan Alford
thenticate field as > > opposed to the Authorization field so I tried that too with no > > success. > > > > I've also just tried formatting them as GET parameters and attaching > > them to the request URL, but that isn't working either. It would look > >

Re: [twitter-dev] Re: oauth request token failing

2010-02-17 Thread Ryan Alford
p://twitter.com/oauth/request_token?oauth_consumer_key= &oauth_signature_method=HMAC-SHA1&oauth_timestamp=1266440918&oauth_nonce=1266440928&oauth_version=1.0&oauth_signature=l%2BYDrTyWGpvDu3owDlVQLakzVns%3D On Feb 17, 3:52 pm, Ryan Alford wrote: > Can you post the URL with que

Re: [twitter-dev] oauth request token failing

2010-02-17 Thread Ryan Alford
Can you post the URL with querystring parameters when you make the request? Ryan On Wed, Feb 17, 2010 at 4:51 PM, Ryan Alford wrote: > Why are you doing this? > > StringBuilder params = new StringBuilder(); >params.append(encode("o

Re: [twitter-dev] oauth request token failing

2010-02-17 Thread Ryan Alford
Why are you doing this? StringBuilder params = new StringBuilder(); params.append(encode("oauth_consumer_key")); params.append("=\""); params.append(encode(CONSUMER_KEY)); params.append("\", "); params.append(encode("oa

Re: [twitter-dev] Re: Application Suspended

2010-02-16 Thread Ryan Alford
Is it even worst that Raffi has seen this thread and posted in it, and still not a peep? You would think that he would look into it and help out, or contact somebody that could look into it. It's seems like they just have their head in the sand. Ryan On Tue, Feb 16, 2010 at 9:13 AM, Jim Fulford

Re: [twitter-dev] Re: What's up with OAuth?

2010-02-14 Thread Ryan Alford
If I am not mistaken, the oauth_verifier is for the PIN. So if you are not a desktop app, then its not required. Ryan Sent from my DROID On Feb 14, 2010 1:04 AM, "jon" wrote: It worked for a one time oauth conversion for about 3000 accounts (i ran a batch job across five processes and think i

Re: [twitter-dev] Re: Looking for someone to help wiith oauth

2010-02-13 Thread Ryan Alford
You can ask technical questions here. You had developers that gave up because of cookie handling? Uhhh... Ryan Sent from my DROID On Feb 13, 2010 10:44 AM, "Merrows" wrote: Thanks for all the interesting comments. Actually I have found it hard to locate the expertise. I have some code sample

Re: [twitter-dev] Re: What's up with OAuth?

2010-02-11 Thread Ryan Alford
He specifically states the possibility for mobile apps to use xAuth. Ryan Sent from my DROID On Feb 11, 2010 11:27 PM, "kehers" wrote: Talking xAuth, hope mobile apps count as 'applications except web applications'

Re: [twitter-dev] Re: oAuth and more users?

2010-02-10 Thread ryan alford
And where get the users there own keys to use the application with > there own twitter account? (e.g tweet deck) > > On 9 Feb., 18:29, John Meyer wrote: > > On 2/9/2010 10:03 AM, ryan alford wrote: > > > > > So you are saying that the user of a third party application m

Re: [twitter-dev] Looking for someone to help wiith oauth

2010-02-10 Thread ryan alford
I have implemented OAuth into my own WPFapplication.(written in C#) You can view my library at CodePlex. http://twiteclipseapi.codeplex.com/ Ryan On Wed, Feb 10, 2010 at 9:48 AM, Merrows wrote: > I am seeking someone skilled in .NET 3.5, C# to help with implementing > twitter oauth, and I wou

Re: [twitter-dev] Re: oAuth and more users?

2010-02-09 Thread ryan alford
So you are saying that the user of a third party application must register a completely new consumer key and consumer secret? So when TweetDeck goes to OAuth, every user will create their own consumer key and consumer secret, therefore, having 10s of thousands of "TweetDeck" applications registere

Re: [twitter-dev] Re: oAuth and more users?

2010-02-09 Thread ryan alford
Yes it does seem backwards. I made my statement because the link he gave was for application consumer keys, not the OAuth tokens. Ryan Sent from my DROID On Feb 9, 2010 11:27 AM, "John Meyer" wrote: On 2/9/2010 9:20 AM, ryan alford wrote: > > > > Your users should

Re: [twitter-dev] Re: oAuth and more users?

2010-02-09 Thread ryan alford
Your users should not be required to get their own consumer key and consumer secret. Ryan Sent from my DROID On Feb 9, 2010 10:04 AM, "_Bensn" wrote: Where can they create there own keys? here - https://twitter.com/apps/new ? On 8 Feb., 18:55, John Meyer wrote: > On 2/8/2010 7:25 AM, _Bens

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-02-04 Thread ryan alford
ee that I am configuring > everything the right way. > > > On Thu, Feb 4, 2010 at 4:43 PM, ryan alford wrote: > >> Does it fail everytime? I will test mine when I get to work in about an >> hour. >> >> Ryan >> >> Sent from my DROID >> >> On Fe

Re: [twitter-dev] .NET and oAuth update problems

2010-02-04 Thread ryan alford
I just did a test with this status... Testing my Twitter OAuth library with some special characters !?:"*&^%...@!~`=+-_ and it went through without any errors and posted the correct status. Ryan On Wed, Feb 3, 2010 at 8:02 PM, ryan alford wrote: > I don't know which ver

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-02-04 Thread ryan alford
Does it fail everytime? I will test mine when I get to work in about an hour. Ryan Sent from my DROID On Feb 4, 2010 12:23 AM, "Duane Roelands" wrote: And please forgive my obnoxious tone; I'm tired and frustrated. :) On Feb 4, 12:05 am, Duane Roelands wrote: > Ryan: > > If posting "Hello

Re: [twitter-dev] .NET and oAuth update problems

2010-02-03 Thread ryan alford
e past, but seemed to recall there were explicit exceptions in that ver of that stuff ... maybe a year ago now? --ab On Wed, Feb 3, 2010 at 7:57 PM, ryan alford wrote: > I don't want to tak...

Re: [twitter-dev] .NET and oAuth update problems

2010-02-03 Thread ryan alford
looks pretty elegant. --ab On Wed, Feb 3, 2010 at 7:48 PM, ryan alford wrote: > I have it working ...

Re: [twitter-dev] .NET and oAuth update problems

2010-02-03 Thread ryan alford
I have it working and have had it working for months. My code is open-source and written in C#. http://twiteclipseapi.codeplex.com/ I haven't tried every special character, though I haven't run across a character that didn't work. Ryan Sent from my DROID On Feb 3, 2010 6:53 PM, "Andrew Badera

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-02-02 Thread ryan alford
er_key=**&oauth_nonce=d985f559241ea3ba0fc9d6ae842e87a3&oauth_signature=hgWo0cdbttaQnUEEWkFU1USCjMc%3D&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1265164536&oauth_token=***oauth_version=1.0&status=%5C%27hello%5C%27 I'm using this library http://code.google.com/p/oauth/ On Jan 2

Re: [twitter-dev] Mobile java client - happy with OAuth as it is

2010-02-02 Thread ryan alford
Another problem with this approach is that you are now required to have a server. So now a developer would have the added expense of paying for a server. Now if the developer already had a server, then it's a moot point, but not all developers have their own hosted servers. What happens when you

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-29 Thread ryan alford
ray('status' => $statusStr))¨ the misterious message ¨incorrect signatures¨ as response. I dont know what to do, becouse i´m following all the stuffs that are described on the Twitter-async API. It began to happen the last Tuesday 26th. My regards. Arian On 27 ene, 00:30, ryan alfor

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
It is still a POST, you just don't write the post data to the request. That post data is now in the query string where Twitter is expecting it. Ryan Sent from my DROID On Jan 26, 2010 4:32 PM, "eco_bach" wrote: Hi Ryan Changed to 'GET' and it seems I still get the Incorrect signature. error

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
The hash algorithm can product both upper and lower case letters.. Ryan On Tue, Jan 26, 2010 at 1:53 PM, eco_bach wrote: > Also noticed, minor thing, but your signature ends in '%253d' > > Mine in uppercase '%253D' >

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
Yes, you could assume your signature creation is correct for most API calls. However, as you see with the update status API call, it has the extra parameter that is the status. Ryan On Tue, Jan 26, 2010 at 1:46 PM, ryan alford wrote: > Don't do the POST request data. You do that f

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
Don't do the POST request data. You do that for Basic Auth, but not for OAuth. Ryan On Tue, Jan 26, 2010 at 1:44 PM, eco_bach wrote: > Ryan > Since its a POST its part of my request.data. > > Didn't think I also needed as part of my query string but will try. > > > Do you know if there is an o

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
I still don't see your status in the query string of the URL. I see it in string for the signature, but in your actual URL, it's not there. This is my entire URL when posting a status update: http://twitter.com/statuses/update.xml?oauth_consumer_key=**&oauth_nonce=57a0d0d1-89e9-4f73-ac3d

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
You need to have the parameter name and value. Ryan Sent from my DROID On Jan 25, 2010 11:47 PM, "eco_bach" wrote: Thanks Ryan I'll have to look into signature creation more closely. Essentially, if I understand correctly, I am most likely missing the "status" parameter BEFORE creating the sig

Re: [twitter-dev] 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-25 Thread ryan alford
I am just wondering why you can't keep all of your questions in the same thread? If somebody was having the same issues as you, they would have to look through 10+ of your threads. To try to answer the question, are you including the "status" parameter as part of the query string, which in turn,

Re: [twitter-dev] Re: Can new twitter account be created from API?

2010-01-25 Thread ryan alford
If Twitter allowed the API to create new accounts, what's to say that somebody won't create a script to create millions of new accounts? Ryan On Mon, Jan 25, 2010 at 11:22 AM, Cameron Kaiser wrote: > > Or is the reason this is not implemented anywhere is because this sort > > of thing is not all

Re: [twitter-dev] Not able to read unicode from Twitter Response XML in C#.net

2010-01-25 Thread ryan alford
Can you paste an example of the bad characters as .Net shows them, and what they should really be? Ryan On Mon, Jan 25, 2010 at 5:36 AM, Rejeev wrote: > Hi all, > > My Twitter response XML contains some unicode characters , I am not > able to read that in C#.net. Its showing junk characters. Pl

Re: [twitter-dev] Re: getting more information than 'Could not authenticate...'

2010-01-25 Thread ryan alford
Are you putting the "status" parameter in the query string? If not, you should be, or atleast, that's what I had to do to get it to work. Ryan On Mon, Jan 25, 2010 at 8:22 AM, eco_bach wrote: > Hi Michael > Good point. Actionscript 3. > Chices are Twitterscript and Tweetr. > > As far as I know

Re: [twitter-dev] Rate limits

2010-01-24 Thread ryan alford
If I am not mistaken, the reset time in seconds is the number of seconds from 1/1/1970. Ryan Sent from my DROID On Jan 24, 2010 8:42 PM, "EastSideDev" wrote: When I get the rate_limit_status.xml, this is what I get: Array ( [hash] => Array ( [hourly-limit] => Array

Re: [twitter-dev] Re: sqllite command for writing to local DB

2010-01-24 Thread ryan alford
Not java though. Thought this was the Android email list Sent from my DROID On Jan 24, 2010 7:41 PM, "Kidd" wrote: Bump!!? On Jan 17, 3:38 pm, Kidd wrote: > Hello all, > > I'm trying to capture data from...

Re: [twitter-dev] Re: sqllite command for writing to local DB

2010-01-24 Thread ryan alford
Searching Google for "writing data to sqlite java" would help you out. Sent from my DROID On Jan 24, 2010 7:41 PM, "Kidd" wrote: Bump!!? On Jan 17, 3:38 pm, Kidd wrote: > Hello all, > > I'm trying to capture data from...

Re: [twitter-dev] Confused about OAuth 1.0 vs 1.0a and Twitter API docs

2010-01-22 Thread ryan alford
o date. > > -M > > On Jan 22, 2010, at 1:18 PM, ryan alford wrote: > > > If you look at the very top of the 1.0 spec, you will see a yellow box... > > > > "This specification was obsoleted by OAuth Core 1.0 Revision A on June > 24th, 2009 to address a session f

Re: [twitter-dev] Confused about OAuth 1.0 vs 1.0a and Twitter API docs

2010-01-22 Thread ryan alford
If you look at the very top of the 1.0 spec, you will see a yellow box... "This specification was obsoleted by OAuth Core 1.0 Revision A on June 24th, 2009 to address a session fixation attack. The OAuth Core 1.0 Revision A specifica

Re: [twitter-dev] Verify credentials and verified =false

2010-01-22 Thread ryan alford
I don't think the "verified" means what you are assuming it means. If you make a call to "verifiy_credentials", you will get a 401 error and an error message if the credentials are invalid. If you receive any user data, then it is a success. Straight from the API documentation http://apiwiki.twi

Re: [twitter-dev] Better understanding of 'signature'

2010-01-22 Thread ryan alford
That is one of your problems. The signature needs to be created for each request. Here is how I do it in C#. I know it's not the language you are using, but hopefully it will help on how to create the signature. Then you can use similar libraries in Flash(if there are similar libraries) to make

Re: [twitter-dev] Re: Not getting correct access token when using OAuth for sign in

2010-01-21 Thread ryan alford
The plus sign (+) in your signature should be encoded. You should URL encode the signature just as you do the other parameters. Ryan On Thu, Jan 21, 2010 at 2:25 PM, eco_bach wrote: > Hmm still not working, signature at the end. > > I believe I get an Httpstatus of '0' immediately after callin

Re: [twitter-dev] Need Help on posting Message

2010-01-20 Thread ryan alford
You need to add this messageRequest.ServicePoint.Expect100Continue = false; so your code should look like this... http://codepaste.net/ababkc Ryan On Wed, Jan 20, 2010 at 10:22 AM, Atul wrote: > Hello Frenz, > > I'm building an application in C#.Net 3.5. My Requirement is to post > messa

Re: [twitter-dev] please help - sporadic '403 Forbidden:' error message when using OAuth Sign-In process

2010-01-20 Thread ryan alford
Isn't this the same problem that you posted about yesterday? http://groups.google.com/group/twitter-development-talk/browse_thread/thread/90cb64e3706e1337# Why create a new post? Ryan On Wed, Jan 20,

Re: [twitter-dev] Obtaining access token WITHOUT using a PIN

2010-01-20 Thread ryan alford
You DO NOT need the PIN for a browser app. It is ONLY REQUIRED for desktop apps. 1. oauth_consumer_key = Consumer key given to you by Twitter 2. oauth_token = The token 3. oauth_signature_method = "HMAC-SHA1" 4. oauth_signature = computed HMAC-SHA1 hash value of the other parameters 5. oauth

Re: [twitter-dev] Beginner question : How to get the user ID after "authorize" OAuth step?

2010-01-20 Thread ryan alford
The "screen_name" is returned in the querystring along with the "oauth_token" and the "oauth_token_secret" values. Ryan On Wed, Jan 20, 2010 at 6:26 AM, Pitt wrote: > Hi, > I'm trying to implement a browser app and Im just blocking at the > first step... > After the user granted the access to h

Re: [twitter-dev] "temporarily overloaded" 503 Service Unavailable

2010-01-20 Thread ryan alford
I don't think they user cares why Twitter is overloaded, so simply telling them that its overloaded should be enough. Ryan Sent from my DROID On Jan 20, 2010 7:13 AM, "eco_bach" wrote: Noticing quite a few ' "temporarily overloaded" 503 Service Unavailable messages when trying to log in lately

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
Who said that was even an option? I haven't seen one person who said that requiring every user to create their own consumer keys to use with an application was an option. The only reason that is even in this discussion is because somebody misinterpreted an answer and that's what they thought was

Re: [twitter-dev] Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
The consumer secret is not public. The consumer key can be seen in the query parameters, but the consumer secret is not a query parameter. It would have to be reverse engineered using the signature. If twitter determines that a specific application is malware, I would only hope that they would b

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
What you say is true about all desktop applications that connect to an internet resource using some form of authentication. I don't see why somebody would expect a Twitter client to be any different. Ryan Sent from my DROID On Jan 18, 2010 10:16 PM, "M. Edward (Ed) Borasky" wrote: I'm trying

Re: [twitter-dev] Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
ould have to get their own API key? Sounds a bit counter intuitive to me. ryan alford wrote: > > You do not want to give out your Consumer Key or Consumer Secret. If someb... ryan alford wrote: > > > There is a difference between giving your application to others to install ... The

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
Also, the consumer secret is harder to get since its not sent as a parameter. Ryan Sent from my DROID On Jan 18, 2010 7:18 PM, "Abraham Williams" <4bra...@gmail.com> wrote: It would be less work for me to run charles proxy and see catch the consumer key/secret in transit then to decompile it an

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
Why would you be required to have a server? To keep your consumer key and consumer secret out of your app? It's not required. Mine are stored in a database that is coupled with my application. The database is password protected, so nobody is getting in. Ryan On Mon, Jan 18, 2010 at 4:27 PM, M

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
"Just the consumer key, or both the consumer key and consumer secret?" both are needed when doing OAuth. Ryan On Mon, Jan 18, 2010 at 2:52 PM, M. Edward (Ed) Borasky wrote: > On Jan 18, 11:32 am, John Meyer wrote: > > On 1/18/2010 12:22 PM, ryan alford wrote: > > &g

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
same. So when that app starts causing problems for users, it YOU that they start contacting. Ryan On Mon, Jan 18, 2010 at 2:32 PM, John Meyer wrote: > On 1/18/2010 12:22 PM, ryan alford wrote: > >> There is a difference between giving your application to others to >> inst

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
There is a difference between giving your application to others to install and use, and others downloading your code for their own applications. If a user is installing your application to use, then your code would include your consumer key. If a user is downloading your open source code to use f

Re: [twitter-dev] Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
You are reading it correct. You do not want to give out your Consumer Key or Consumer Secret. If somebody downloads the source of your application, they are most likely going to be using it in their own application. Therefore, they need their own Consumer Key and Consumer Secret. Ryan On Mon,

Re: [twitter-dev] Re: OAuth best practice

2010-01-18 Thread ryan alford
tever makes the best UX for oath+mobile. > > On Mon, Jan 18, 2010 at 6:20 AM, ryan alford wrote: > >> You are correct. The PIN handshaking is only for "Desktop Apps". >> >> Ryan >> >> >> On Mon, Jan 18, 2010 at 9:12 AM, eco_bach wrote: >>

Re: [twitter-dev] Re: Basic Auth Deprecation in June

2010-01-18 Thread ryan alford
yes, it's official. The depreciation of Basic Auth will "start" in June. Ryan On Mon, Jan 18, 2010 at 10:57 AM, Hwee-Boon Yar wrote: > Thanks. Hope it's not official. I don't remember reading anything like > that on the 2 lists. > > -- > Hwee-Boon > > On Jan 18, 7:01 pm, Rich wrote: > > Ryan

Re: [twitter-dev] Re: OAuth best practice

2010-01-18 Thread ryan alford
You are correct. The PIN handshaking is only for "Desktop Apps". Ryan On Mon, Jan 18, 2010 at 9:12 AM, eco_bach wrote: > Jeff, I might be wrong, as there seems to be some confusion on this, > but I believe the extra PIN handshaking is ONLY required for what > Twitter defines as 'Desktop Apps'.

Re: [twitter-dev] Sign in with Twitter, PIN authentication and Desktop Clients

2010-01-17 Thread ryan alford
1. Desktop applications are those that are installed or ran from a PC /Mac/Linux or on a mobile device. They are outside of the browser. 2. One is used for web applications, the other is for desktop applications. 3. You are correct. PIN workflow is only for desktop applications. Ryan Sent fr

Re: [twitter-dev] authenticity_token same as access token?

2010-01-17 Thread ryan alford
Trying to screen_scrape? I don't believe they are the same. Ryan Sent from my DROID On Jan 17, 2010 5:20 PM, "eco_bach" wrote: Hi Can someone confirm or deny whether the authenticity_token returned is the same as 'access_token' referred to in the documentation? Thanks in advance!

Re: [twitter-dev] Re: Failed to validate oauth signature and token

2010-01-17 Thread ryan alford
Yeah, the Nonce needs to be a unique value. If your language can create GUIDs, that might be the best option. Ryan On Sat, Jan 16, 2010 at 11:11 PM, eco_bach wrote: > solved, apparently my oauth_nonce value was incorrect, I assumed it > was simply a random string and I didn't use the mx.utils.

Re: [twitter-dev] List of Common Error messages and possible causes, ie 'Failed to validate oauth signature and token'.

2010-01-16 Thread ryan alford
Going by your other email, your query string parameters are not in the correct order. This is a very important part of OAuth. Ryan Sent from my DROID On Jan 16, 2010 9:48 PM, "eco_bach" wrote: Hi I've read the FAQ, and all the documentation. Am attempting to get an AS3 client working using Oa

Re: [twitter-dev] Failed to validate oauth signature and token

2010-01-16 Thread ryan alford
The signature needs to be the very last parameter. You put all of the parameters in order except for the signature. Then you create the signature and append it to the end of the query string. Ryan Sent from my DROID On Jan 16, 2010 9:48 PM, "eco_bach" wrote: Ok Yes this IS a common error mes

Re: [twitter-dev] Re: Reinstate 'from app' for Basic Auth desktop apps until OAuth is fixed

2010-01-13 Thread ryan alford
couldn't be used in production apps. Ryan Sent from my DROID On Jan 13, 2010 5:46 PM, "Tim Haines" wrote: On Thu, Jan 14, 2010 at 10:52 AM, ryan alford wrote: > > I've been using O... I've found it just as stable as the rest of the API. It's not perfect, bu

Re: [twitter-dev] Re: Reinstate 'from app' for Basic Auth desktop apps until OAuth is fixed

2010-01-13 Thread ryan alford
I've been using OAuth for more than 3 months now, about 8 hours a day during the week while at work, using my own library and my own twitter client. I've never had an issue with stability. Now the desktop implementation is crappy(been posted about 50 billion times), but other than that, I've neve

Re: [twitter-dev] question about PIN code

2010-01-12 Thread ryan alford
When you direct the user to oauth/authorize, the user will be presented with an "Allow"/"Deny" page from Twitter. If they "Allow", they then will be given an PIN on the screen. The user will need to give this PIN to you. Ryan On Tue, Jan 12, 2010 at 7:59 PM, dduby wrote: > hi,,, > i am trying

Re: [twitter-dev] Re: Please Help

2010-01-06 Thread ryan alford
You are don't have the parameters in the proper order. The signature goes last. The rest of the parameters must be in order. Put the parameters in order, create the signature, then append the signature to the end or the query string. Ryan Sent from my DROID On Jan 6, 2010 2:05 AM, "Vikram" w

Re: [twitter-dev] Please Help

2010-01-05 Thread ryan alford
Post your query string. Don't necessarily need to see the code yet, just need to see the URL that you are requesting. The error means that your signature is incorrect. Ryan On Tue, Jan 5, 2010 at 2:06 PM, Vikram wrote: > When I try to get the QAuth Request token I get "Failed to validate > oa

Re: [twitter-dev] Re: Skipping the PIN based workflow for Desktop clients using OAuth

2010-01-04 Thread ryan alford
DROID On Jan 4, 2010 1:55 AM, "M. Edward (Ed) Borasky" wrote: On Jan 3, 7:39 am, ryan alford wrote: > In the Desktop workflow, you don't have to enter the PIN every time. The > user is NOT required t... Yes ... but you should inform the user that you are storing these t

Re: [twitter-dev] Removing Registered Application

2010-01-03 Thread ryan alford
You can revoke access from the Connections tab in the Settings on the web site. Ryan Sent from my DROID On Jan 3, 2010 7:56 PM, "Greg" wrote: Is it possible to remove a application that you registered? Like delete it from your list?

Re: [twitter-dev] Re: Skipping the PIN based workflow for Desktop clients using OAuth

2010-01-03 Thread ryan alford
In the Desktop workflow, you don't have to enter the PIN every time. The user is NOT required to authorize your application every time they want to use it.After the first authorization, YOU store the access token and access token secret either in a database, file, or some other type of storage

Re: [twitter-dev] Re: Request without oauth

2009-12-10 Thread ryan alford
Twitter is going to be making changes to OAuth to where the user can give you their credentials, and you can use those to get an Access Token. This is an option to bypass the "PIN" workflow. On Thu, Dec 10, 2009 at 10:03 AM, Fauzil Hamdi wrote: > some body please > > 2009/12/10 Fauzil Hamdi >

Re: [twitter-dev] Re: A New API For Browserless Apps?

2009-12-10 Thread ryan alford
I was thinking the same. On Thu, Dec 10, 2009 at 9:33 AM, John Meyer wrote: > On 12/10/2009 6:22 AM, Raffi Krikorian wrote: > >> we're not making any fundamental changes to oauth - your apps should >> continue to work fine. >> >> the changes that we are making involve implementing >> >> http://

Re: [twitter-dev] Re: What Is The Status of Twitter OAuth?

2009-12-01 Thread ryan alford
I never knew that asking questions would be considered "whining". Twitter has never officially stated that OAuth is in "production" like they announce other features (like Lists). Now they seem to be telling developers to start moving to OAuth. You state to "don't" use it. It doesn't look like

Re: [twitter-dev] What Is The Status of Twitter OAuth?

2009-11-30 Thread ryan alford
He's not referring to OAuth the specification. He is referring to Twitter's implementation of it. Ryan On Mon, Nov 30, 2009 at 1:54 PM, Chris Babcock wrote: > On Mon, 30 Nov 2009 10:27:24 -0800 (PST) > Dewald Pretorius wrote: > > > Last information I've seen said that Twitter OAuth is in publi

Re: [twitter-dev] oauth Process flow and status Part 1

2009-11-24 Thread ryan alford
The signature has to go last. That's one mistake that most people make. You are suppose to put the parameters in order EXCEPT the signature parameter. The signature parameter is created by using the other parameters, then it's appended to the end of the query string. The OAuth signature is gene

Re: [twitter-dev] Authentication (user/pass )after Oauth authentication.....:S

2009-11-23 Thread ryan alford
After you get the pin, what URL do you go to? On Nov 23, 2009 7:50 AM, "dmsiva" wrote: hello. I make well oauth authentication. I put the pin, and I get the access_token, etc.. but when I request a 'get' the browser asks me another authentication (username, password). what can I be doing wrong?

Re: [twitter-dev] Get screen name with OAuth

2009-11-20 Thread ryan alford
In the query string of the returned response, there is a field called "screen_name". That will contain the screen name of the user that authorized the application. So when you get "oauth_token" and "oauth_token_secret" from the response, get "screen_name" also. Ryan On Fri, Nov 20, 2009 at 10:5

  1   2   >