Why must we "change temporary credentials for token credentials" in OAuth?

Posted by PK on Stack Overflow See other posts from Stack Overflow or by PK
Published on 2010-03-04T07:35:30Z Indexed on 2010/03/08 9:51 UTC
Read the original article Hit count: 476

Filed under:

oauth

|

temporary

|

credentials

|

token

Can't the server just "upgrade" the temporary credentials to token credentials and retain the same key and secret?

The client can then start doing authenticated calls right away after the recieving the callback from the server stating that the temporary credentials has been "upgraded".

Of cause if the temporary credentials have not be upgrade (i.e. client doesn't wait for callback) the authenticated call fails.

So the question is why make an extra call to the server after the callback to "exchange" temporary credentials for token credentials?

© Stack Overflow or respective owner

Related posts about oauth

Issues POSTing XML to OAuth and Signature Invalid with Ruby OAuth Gem

as seen on Stack Overflow - Search for 'Stack Overflow'
[Cross-posted from the OAuth Ruby Google Group. If you couldn't help me there, don't worry bout it] I'm working on integrating a project with TripIt's OAuth API and am running into a weird issue. I authenticate fine, I store and retrieve the token/secret for a given user with no problem, I can even… >>> More
how do i install PHP with JSON and OAuth on Mac Snow Leopard?

as seen on Server Fault - Search for 'Server Fault'
i want to use the dropbox api via this library http://code.google.com/p/dropbox-php/ i installed MAMP then I tried "sudo pecl install oauth" but I got downloading oauth-1.0.0.tgz ... Starting to download oauth-1.0.0.tgz (42,834 bytes) ............done:… >>> More
How do I install PHP with JSON and OAuth on Mac Snow Leopard?

as seen on Server Fault - Search for 'Server Fault'
I want to use the Dropbox API via this library, http://code.google.com/p/dropbox-php/. I installed MAMP, and then I tried sudo pecl install oauth but I got the following. >>>> downloading oauth-1.0.0.tgz ... Starting to download oauth-1.0.0.tgz (42,834 bytes) ............done: 42… >>> More
Oauth for Google API example using Python / Django

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, I am trying to get Oauth working with the Google API using Python. I have tried different oauth libraries such as oauth, oauth2 and djanog-oauth but I cannot get it to work (including the provided examples). For debugging Oauth I use Google's Oauth Playground and I have studied the API and the… >>> More
OAuth::Problem (parameter_absent)

as seen on Stack Overflow - Search for 'Stack Overflow'
Im working with OAuth 0.3.6 and the linkedin gem for a Rails application and I have this issue where OAuth throws an error saying that OAuth::Problem (parameter_absent). The thing is it doesn't throw the error on every occasion its called and the problem is I am unable to reproduce the issue locally… >>> More

Related posts about temporary

SQL SERVER – Storing Variable Values in Temporary Array or Temporary List

as seen on SQL Authority - Search for 'SQL Authority'
SQL Server does not support arrays or a dynamic length storage mechanism like list. Absolutely there are some clever workarounds and few extra-ordinary solutions but everybody can;t come up with such solution. Additionally, sometime the requirements are very simple that doing extraordinary coding… >>> More
Temporary table vs Temporary variable in SQL Server

as seen on C# Corner - Search for 'C# Corner'
We have seen lot of difference between temporary variable and temporary table. Here is a nice difference in Transaction perspective. >>> More
Temporary operation in a temporary directory in shell script

as seen on Stack Overflow - Search for 'Stack Overflow'
I need a fresh temporary directory to do some work in a shell script. When the work is done (or if I kill the job midway), I want the script to change back to the old working directory and wipe out the temporary one. In Ruby, it might look like this: require 'tmpdir' Dir.mktmpdir 'my_build' do |temp_dir| … >>> More
Storing Temporary Items Without User Having to Register

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a ruby on rails app where I want users to be able to store a list. The list is similar to a shopping cart except for the fact that they input their own items. I would like store everything in the session, but this seems like it would get complicated and would start to take up space after… >>> More
MySQL – Beginning Temporary Tables in MySQL

as seen on SQL Authority - Search for 'SQL Authority'
MySQL supports Temporary tables to store the resultsets temporarily for a given connection. Temporary tables are created with the keyword TEMPORARY along with the CREATE TABLE statement. Let us create the temporary table named Temp CREATE TEMPORARY TABLE TEMP (id INT); Now you can find out the column… >>> More