Re: [Snowy] OAuth in Snowy

[Rodrigo Moya <rodrigo gnome-db org>]

On Sun, 2009-06-28 at 06:35 -0700, Sandy Armstrong wrote:
> On Thu, Jun 25, 2009 at 6:55 AM, Rodrigo Moya<rodrigo gnome-db org> wrote:
> > On Thu, 2009-06-25 at 05:31 -0700, Sandy Armstrong wrote:
> >> On Thu, Jun 25, 2009 at 4:46 AM, Brad Taylor<brad getcoded net> wrote:
> >> > Hey Sandy,
> >> >
> >> >> Well, that won't really work unless you always use PLAINTEXT, as the
> >> >> consumer secret is part of the signature key and should be a known
> >> >> entity.
> >> >>
> >> >> However, per the OAuth spec:
> >> >>
> >> >> "The Consumer Secret MAY be an empty string (for example when no
> >> >> Consumer verification is needed, or when verification is achieved
> >> >> through other means such as RSA)."
> >> >>
> >> >> Maybe that's the best approach.
> >> >>
> >> >> Do we know if django-piston supports automatically adding new consumer
> >> >> keys that appear in requests?  Probably not...we should probably
> >> >> implement that part ourselves.
> >> >
> >> > Have you guys sorted this secrets issue out yet?  Also, have you had a
> >> > chance to work on the Tomboy component of the OAuth support?  I wonder
> >> > if we can make piston support both HTTP and OAuth for the time being so
> >> > we can get this patch committed.
> >>
> >> Well, since Piston doesn't seem to support empty secrets, we'll
> >> probably just make an "everybody" secret as Stuart suggests.
> >>
> >> I worked on Tomboy/OAuth a bit the other day, and it is coming along.
> >> I think I just need about half a day to finish it up.
> >>
> > if there's anything I can do to help you (given I know almost nothing
> > about OAuth), please let me know.
> 
> I've been working on this stuff this weekend, and I just wanted to
> share that I just had the first successful complete Tomboy<->Snowy
> sync using OAuth.
> 
> Hope to have it cleaned up soon so I can get this all pushed today.
> With Brad on vacation now, it will all probably be subject to some
> post-commit reviewing when he returns, so expect changes.  :-)
> 
> This email is also to let Rodrigo know that he shouldn't waste time
> working on completing the Tomboy patch I sent him, as I'm just about
> done here and have doubtless diverged, too.
> 
ok, I didn't have much time during the weekend in front of the computer,
so no time wasted :-) So, great to see you did the work
-- 
Rodrigo Moya <rodrigo gnome-db org>