#oauth

ID To­kens are lit­tle chunks of text which claim that some par­tic­u­lar per­son wants to tell some par­tic­u­lar party out there that they’re signed in and au­then­ti­cated by the Iden­tity Provider that is­sued the token.

"This snippet for Piston allows you to offer a choice of authentication methods to clients."

"We're happy to announce support for the OpenID OAuth Hybrid Protocol, which combines OpenID authentication (sign in) with OAuth authorization (access control) in a single interface. The Hybrid Protocol makes it easy for the hundreds of millions of Yahoo! users to sign into websites with a Yahoo! account, and to enable two-way data sharing of their Profile, Contacts, and Updates, without having to register a new site-specific account or share their Yahoo! password."

"From time to time I need to debug OAuth-protected APIs, checking response headers and examining XML and JSON payloads. curl generally rocks for this sort of thing, but when the APIs in question are protected with OAuth, things break down. Likewise for benchmarking (ab, httperf, etc.) and exploration–isn’t it nice to browse APIs that return XML in Firefox? This needn’t to be the case."

"+1 for OAuth. This is the sort of thing about which we once said "never again", after the blog posting thingy and retaining user credentials there."

"And as its a 85 slides to be given in 45 minutes you can imagine that there is a fair amount of information missing from the slides"

"So, I'm still trying to get AtomPub working with OAuth"

"Over the weekend we quietly rolled out support for the oauth protocol."

"Mike released HTTP_Request_OAuth today, so I spent a little while this evening coding up Service_Twitter as helper class for making OAuth authorized requests against the Twitter API."

"OAuth aims to unify the experience and implementation of delegated web service authentication into a single, community-driven protocol."