oauth-plugin icon indicating copy to clipboard operation
oauth-plugin copied to clipboard

Trusted sites

Open alec-c4 opened this issue 16 years ago • 1 comments

Hi, Is there any ability to mark site as trusted? For example - somebody have some sites - auth.site.com (as oauth provider) and s1.site.com, s2.site.com etc as consumers. Of course - owner would like to skip step "Do you agree to add site s1.site.com as trusted?", but for security reason would like to not mark other sites like othersite.com, othersite2.com as trusted. I'm planning to add this functionality to plugin, but i'd like to discuss how to develop with you, because i'm a newbie in oauth. Any ideas? From my understanding - there are need to add password for Request Token and if password is not present - use default callflow. Maybe you have another vision of this?

alec-c4 avatar Jul 29 '09 09:07 alec-c4

I am not 100% sure I understand, but the general approach would be to pass special configuration along in the options for a site in CONSUMER_CREDENTIALS will be passed along to the OAuth::Consumer class from the oauth gem.

I suggest you post on the OAuth-Ruby list to get some ideas on how to do it. There could be some one who's already tried something similar:

http://groups.google.com/group/oauth-ruby

pelle avatar Jul 29 '09 14:07 pelle