<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Anders Feder wrote:
<blockquote cite="mid:1216179118.10871.19.camel@voyager" type="cite">
<pre wrap="">If I'm not mistaken, OAuth requires the user to approve the
authentication request in her browser, which is an interactive action.
</pre>
</blockquote>
This is true, but this only needs to be done when obtaining an access
token, which can be used potentially forever without further
interaction from the user.<br>
<br>
And of course any number of extensions could be created to obtain an
access token via an alternate path, after which normal OAuth can be
used.<br>
<br>
<blockquote cite="mid:1216179118.10871.19.camel@voyager" type="cite">
<pre wrap="">
Joseph Holsten pointed me to Appendix A of the OAuth specification for
an example. In step A.3, "The Consumer redirects Jane’s browser to the
Service Provider User Authorization URL to obtain Jane’s approval for
accessing her private photos."
Also, OAuth appears to be more about authorization (to access a remote
resource) than about authentication.
Is there any way to operate either OpenID or OAuth entirely
non-interactively?
tir, 15 07 2008 kl. 08:38 -0700, skrev Scott Kveton:
</pre>
<blockquote type="cite">
<pre wrap="">Hi Anders,
You might want to check out OAuth ... it was developed for just such a
situation.
- Scott
On Tue, Jul 15, 2008 at 4:20 AM, Anders Feder <a class="moz-txt-link-rfc2396E" href="mailto:lists.anders@feder.dk"><lists.anders@feder.dk></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hello,
There have been some discussion over the years about using OpenID for
non-interactive logins. Can someone kindly tell me what the status is of
this feature? In particular login from non-browser applications - is
this currently possible (e.g. using client certificate authentication)?
Thanks.
--
Anders Feder <a class="moz-txt-link-rfc2396E" href="mailto:lists.anders@feder.dk"><lists.anders@feder.dk></a>
_______________________________________________
specs mailing list
<a class="moz-txt-link-abbreviated" href="mailto:specs@openid.net">specs@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/specs">http://openid.net/mailman/listinfo/specs</a>
</pre>
</blockquote>
</blockquote>
<pre wrap=""><!---->
_______________________________________________
specs mailing list
<a class="moz-txt-link-abbreviated" href="mailto:specs@openid.net">specs@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/specs">http://openid.net/mailman/listinfo/specs</a>
</pre>
</blockquote>
<br>
</body>
</html>