I agree, in general, however the only reason I brought it up as scope is so
that it could serve both apps and twitter. This method would produce for
twitter a bad-list in general. But thanks

On Thu, Apr 9, 2009 at 2:13 PM, Brian Gilham <bgil...@gmail.com> wrote:

> That's what I had in mind, just to clarify.
> -----Original Message-----
> From: Mobasoft <mobat...@gmail.com>
>
> Date: Thu, 9 Apr 2009 14:11:18
> To: Twitter Development Talk<twitter-development-talk@googlegroups.com>
> Subject: [twitter-dev] Re: oAuth - App Revoke User Access
>
>
>
> IMHO, That is beyond the scope of OAuth.
>
> Your app should contain/maintain the logic for who is allowed in or in
> this case, kept out.
>
> It is foreseeable that having an OAuth API call to revoke your
> application from the user (on their behalf, if you had read/write
> access) could be a good thing to have.
>
>
>
> On Apr 9, 2:17 pm, Dossy Shiobara <do...@panoptic.com> wrote:
> > On 4/9/09 3:14 PM, Peter Denton wrote:
> >
> > > An App should be able to revoke User access.
> >
> > Sure, just store a boolean in your app with the OAuth token as to
> > whether they're allowed to use your app or not.
> >
> > --
> > Dossy Shiobara              | do...@panoptic.com |http://dossy.org/
> > Panoptic Computer Network   |http://panoptic.com/
> >    "He realized the fastest way to change is to laugh at your own
> >      folly -- then you can let go and quickly move on." (p. 70)
>



-- 
Peter M. Denton
www.twibs.com
i...@twibs.com

Twibs makes Top 20 apps on Twitter - http://tinyurl.com/bopu6c

Reply via email to