3 ms·
I wish there was an OAuth for RSS, so I could subscribe to private/paid feeds through reader apps I only partially trusted.
by epaulson 6y ago
I wish there was an OAuth for RSS, so I could subscribe to private/paid feeds through reader apps I only partially trusted.
- njkleiner 6y agoThere actually is, kind of. The IndieWeb[0] community has come up with a protocol called AutoAuth[1] that solves this exact problem. It's only a rough draft at the moment and it is built upon the IndieAuth[2] protocol (which, in turn, is based on OAuth 2), but I think the way it works is highly fascinating. Here[3] is a an overview of how it works. [0]: https://indieweb.org/ https://indieweb.org/ [1]: https://indieweb.org/AutoAuth https://indieweb.org/AutoAuth [2]: https://indieauth.spec.indieweb.org/ https://indieauth.spec.indieweb.org/ [3]: https://www.svenknebel.de/temp/autoauth.html https://www.svenknebel.de/temp/autoauth.html
- WGH_ 6y agoI've seen many sites that generate feed URLs with secret token appended as a query parameter. This token only gives an access to the feed, so this as safe as it gets, and requires no special support on reader app part.