3 ms·
There's an OAuth beta now. I'll wait until they make use of it.
by apgwoz 18y ago
There's an OAuth beta now. I'll wait until they make use of it.
- wheels 18y agoOriginally I wanted to do all of the password wrangling in javascript so that it never hit our servers. We only need it to make the follow buttons and the little viral message work (we ask for confirmation before posting and say exactly what it'll post to minimize the evil), but using HTTP basic authentication with Javascript seems to be a no-go, so we just bounce the request off our server. All of the data that we pull is just public data that's grabbed with our white-listed account. I'll look into OAuth in the future. At the time I just saw in the Twitter API docs, "For the time being, HTTP Basic Authentication is the only supported authentication scheme."
- FictiveEvan 18y agoWhat problem did you run into doing HTTP Basic Auth with javascript?
- wheels 18y agoSecurity error. Which seemed to kind of make sense. Didn't seem to be allowed via Javascript. Googling now it seems like it might be possible if you write the header to the AJAX HTTP request explicitly. I might play more with that later. Granted, there, for most users, the difference would be minimal since most presumably wouldn't read the page's Javascript to verify what we'd said.