Friday, April 2, 2010

Learning the Twitter API: OAuth

Anyone using the Twitter API these day seems to be having pain with the OAuth. Well what is OAuth, How does it work, and why does twitter want to switch over to OAuth? Well OAuth is an open form of authorization that allows you to share private resources from one website to another website without having to give your username and password. It works by giving out tokens of data, and each token gives access to a specific site for a specific resource. This way your username and password or not compromised. Think of it like going to a restaurant and giving your credit card to the waiter to charge, but your not giving him your pin number so he can go to an ATM and take all your money. Thats how OAuth works in a nutshell. Twitter wants to switch over to OAuth from Basic Auth because OAuth is much more secure. Twitter is even increasing the rate limit for OAuth users of their twitter api endpoint to 350 call per hour!

No comments:

Post a Comment