[OpenID] Using OpenID outside of the browser

[Chris Messina]

On 5/1/07, Terry Hayes <Terry.Hayes at corp.aol.com> wrote:
> On May 1, 2007, at 14:09 , Chris Messina wrote:
>
> > * This situation also holds for remote web services that want to make
> > use of protected Ma.gnolia user data that requires authentication for
> > access.
> >
> I'd like to disagree somewhat with the last point.  It seems to imply
> that the remote service would authenticate, as in providing the users
> credentials in order to get access.  Instead, the remote service
> needs the ability to acquire an authorization value of some kind.
> This is the approach that we have taken in the AOL Open Auth APIs.
>
> This still leaves open the problem of acquiring the "token" in the
> first place, which will need to be different in the browser and non-
> browser cases.
>
> Terry

Hmm. Okay, that's fair. I'm not the technical guy on the project, I've
only been trying to usher it along. I'll defer to Blaine and Larry on
this one...

I should also mention, somewhat ironically, that we originally called
our project OpenAuth -- some time before AOL came out with their
eponymous project. ;)

Oh, and this work will eventually be released under a free and open license.

Chris


-- 
Chris Messina
Citizen Provocateur &
  Open Source Ambassador-at-Large
Work: http://citizenagency.com
Blog: http://factoryjoe.com/blog
Cell: 412 225-1051
Skype: factoryjoe
This email is:   [ ] bloggable    [X] ask first   [ ] private