Is it possible to use OAuth starting from the service provider website?

Posted by Brian Armstrong on Stack Overflow See other posts from Stack Overflow or by Brian Armstrong
Published on 2010-04-04T20:40:57Z Indexed on 2010/04/04 20:43 UTC
Read the original article Hit count: 478

Filed under:

I want to let people create apps that use my API and authenticate them with OAuth.

Normally this process starts from the consumer service website (say TwitPic) and they request an access token from the service provider (Twitter). The user is then taken to the service provider website where they have to allow/deny access to to the consumer.

I'm wondering if it's possible to initiate this process from the service provider website instead.

So in this example you would start on Twitter's site, and maybe there is a section marked "do you want to turn on access for TwitPic?". If you click yes, it passes the access token directly to TwitPic which now has access to your account.

Basically, fewer steps. I'm looking at the OAuth docs and it looks like the request token is generated on the consumer side and used later to turn it into an access token. So it's not really designed with what I described above in mind, but I thought there might be a way.

http://oauth.net/core/1.0/ (Search for "steps")

Thanks!

© Stack Overflow or respective owner

Related posts about oauth