Why is it a bad idea to use ClientLogin for web apps in the Google API?

Posted by Onema on Stack Overflow See other posts from Stack Overflow or by Onema
Published on 2010-02-09T02:03:29Z Indexed on 2010/03/31 20:53 UTC
Read the original article Hit count: 280

Filed under:

google-api

|

user-authentication

|

client

|

login

I just picked up the Google API today to allow some users of our site to upload videos to our own organization YouTube account. I Don't want our users to know our user name and password, but rather give them the option if they want to upload videos to youtube or not. If they choose to do it, they check on a check box and hit the submit button.

I keep seeing over, and over in the Developers guide that ClientLogin, which to me looks like the best option to implement what I want to do, is not a good idea for user authentication in web applicaitons. The "AuthSub for web applications" doesn't seem to be the best mechanism for what I want to implement!

Any ideas on what to do?

Thank you

© Stack Overflow or respective owner

Related posts about google-api

Insert an event on Google Resource Calendar using the latest google-php-client-api

as seen on Stack Overflow - Search for 'Stack Overflow'
Created a Project Enabled Calendar API Created an OAuth2.0 Service Account Downloaded the keyfile .p12 and saved it locally (not using a server with a public IP address) Shared my Resource Calendar with the Email address created in the Service Account (with Manage Sharing rights) Entered Client ID… >>> More
Using "ContactsQuery" for searching particular contact in Google contact using Google API Ver 2

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, Currently i am searching particular as below: Feed<Contact> f = contactsRequest.GetContacts(); foreach (Contact e in f.Entries) { if (e.Title == "MyContact") { MesageBox.Show("Contact already exist"); } } This will work fine if no of contacts are less… >>> More
Getting number of hits from Google API

as seen on Stack Overflow - Search for 'Stack Overflow'
I've tried to find a way to do this, but without success. I'm looking for a way to find out how many hits a search gets, and I don't want to do this manually, or with regex searching trough the html code. Surely the Google APIs must have a simple way to do this. Does anyone know of one? >>> More
Google API to check number of indexed pages?

as seen on Stack Overflow - Search for 'Stack Overflow'
Is there a Google API similar to Yahoo and Bing's API's to check for the number of indexed pages on a specified domain? For example, for Yahoo if I type in the following URL: http://search.yahooapis.com/SiteExplorerService/V1/pageData?appid=MTSlade&query=http://www.dave-sellers.co.uk&domain_only=1&results=1 Then… >>> More
Determine the State given a Lat/Long using Google API in android

as seen on Stack Overflow - Search for 'Stack Overflow'
Is there a way to determine the State in which a given Lat/Long resides using the Google Api in Android? thx >>> More

Related posts about user-authentication

SSL on Heroku / User Authentication Across Multiple Domains

as seen on Stack Overflow - Search for 'Stack Overflow'
Posted a previous question on this, but have a followup. I was trying to create a workaround to use SSL on the expensive custom domain. I'm willing to live with bumping a user to https://app.heroku.com from http://www.app.com for certain secure pages, and have monkey-patched SSL required to make… >>> More
Symfony user authentication using Active Directory

as seen on Stack Overflow - Search for 'Stack Overflow'
Is there a way to authenticate users in symfony apps using Active Directory? Can you please point out some documentation? edit What i need is to have a transparent login in my application. The user authenticates once at windows logon, then all applications should be accessed with the same credentials… >>> More
Handling User Authentication in C#.NET?

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi! I am new to .NET, and don't have much experience in programming. What is the standard way of handling user authentication in .NET in the following situation? In Process A, User inputs ID/Password Process A sends the ID/Password to Process B over a nonsecure public channel. Process B authenticates… >>> More
SECURITY Flaws in this design for User authentication.

as seen on Stack Overflow - Search for 'Stack Overflow'
SECURITY Flaws in this design for User authentication. From: http://wiki.pylonshq.com/display/pylonscookbook/Simple+Homegrown+Authentication Note: a. Project follows the MVC pattern. b. Only a user with a valid username and password is allowed submit something. Design: a. Have a base… >>> More
Handling User Authentication in .NET?

as seen on Stack Overflow - Search for 'Stack Overflow'
I am new to .NET, and don't have much experience in programming. What is the standard way of handling user authentication in .NET in the following situation? In Process A, User inputs ID/Password Process A sends the ID/Password to Process B over a nonsecure public channel. Process B authenticates… >>> More