From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Julien Danjou Newsgroups: gmane.emacs.devel Subject: Re: OAuth2 implementation in Elisp Date: Mon, 26 Sep 2011 11:52:54 +0200 Message-ID: <87vcsfmxzd.fsf@keller.adm.naquadah.org> References: <87sjnojl7j.fsf@keller.adm.naquadah.org> <4E7BAFA4.8090800@dogan.se> <4E7BAFE2.2090102@dogan.se> <87k490jkaw.fsf@keller.adm.naquadah.org> <87d3eo984j.fsf@lifelogs.com> <87mxdsbx1n.fsf@keller.adm.naquadah.org> <87litc695c.fsf@lifelogs.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" X-Trace: dough.gmane.org 1317030791 22185 80.91.229.12 (26 Sep 2011 09:53:11 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Mon, 26 Sep 2011 09:53:11 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Sep 26 11:53:05 2011 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1R87ry-00061Z-Hn for ged-emacs-devel@m.gmane.org; Mon, 26 Sep 2011 11:53:02 +0200 Original-Received: from localhost ([::1]:37845 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R87ry-0007I9-3v for ged-emacs-devel@m.gmane.org; Mon, 26 Sep 2011 05:53:02 -0400 Original-Received: from eggs.gnu.org ([140.186.70.92]:54920) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R87rv-0007Hr-9W for emacs-devel@gnu.org; Mon, 26 Sep 2011 05:53:00 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1R87ru-000656-4x for emacs-devel@gnu.org; Mon, 26 Sep 2011 05:52:59 -0400 Original-Received: from prometheus.naquadah.org ([212.85.154.174]:44205 helo=mx1.naquadah.org) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R87rt-00064r-VK for emacs-devel@gnu.org; Mon, 26 Sep 2011 05:52:58 -0400 Original-Received: from keller.adm.naquadah.org (AMontsouris-651-1-106-83.w83-202.abo.wanadoo.fr [83.202.161.83]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mx1.naquadah.org (Postfix) with ESMTPSA id 11E135C11A for ; Mon, 26 Sep 2011 11:52:56 +0200 (CEST) Mail-Followup-To: emacs-devel@gnu.org In-Reply-To: <87litc695c.fsf@lifelogs.com> (Ted Zlatanov's message of "Sun, 25 Sep 2011 08:31:27 -0500") User-Agent: Gnus/5.110018 (No Gnus v0.18) Emacs/24.0.50 (gnu/linux) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 212.85.154.174 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:144296 Archived-At: --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Sun, Sep 25 2011, Ted Zlatanov wrote: > If you could stay under 78 it would be polite. I can't find the > reference but I'm pretty sure for Emacs submissions at least it's > required. Fine. > #+begin_src lisp > (browse-url (concat auth-url > (if (string-match-p "\?" auth-url) "&" "?") > "client_id=3D" client-id > "&response_type=3Dcode&redirect_uri=3Durn:ietf:wg:o= auth:2.0:oob" > (if scope (concat "&scope=3D" (url-hexify-string sc= ope)) "") > (if state (concat "&state=3D" state) ""))) > > #+end_src > > This is not a POST and `client_id' for instance could have invalid > characters for a URL. Good catch indeed. I'll do a re-check of such things then and will fix them before they break. :-) > That makes no sense. You are asking the user to enter information Emacs > is displaying. Can you grab that information for them, so they don't > have to enter it? No, this would kill the whole point of OAuth. You may want to take a look at the spec of the protocol to understand how it works. :) =2D-=20 Julien Danjou --=-=-= Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBAgAGBQJOgEt3AAoJEGEbqVCLeKXCPn4P/2kmMyP3pa3WXQGVpYRQmL9m j0E77FECcY7O2KlbNotmCd6YKIAHDwVyWcYqfbqyncWApJdmH+SgWeVqXFrSVYQp y8Wf2VWSGzVLK6MovzsNWkJ3UAAKvNH1J6dJu87SIY8RyGfv3zP54Z5Ea8/PmSfN 62lIPM4g87dkyUqOATQQiSEr0cAd/AvghEKHixPTz3RdXbDp7tOG7VLwjLxgyI5R kjUGD8KFoYqJY5X2QBoYMt84CYuphgBFN0CmYEZSn3EtCbDj7r1fnBrg1Oy20cF5 fm2/GQuc82RdMMTj/QbZIGYXGOuTXntgjIjOchIDtchrWIK8SjNV8PpQ8fiBUo1w DLGxMXyueUU+cQfPIe8Ex9D6BG6tMKPqbCl53Ia7m+D+sYWgszXruQK7DVHKgm6w LU1vVM5cuzn5ENh1yTJ+Hdm8TcOlDooe1I94InUdvEkRuXxGWWs/19rlNHWBA7JD YmPzuMB+H6VrGu+cnBzD0Zyr4yJCcIFwIKBLRtbZAAQjIJ11CXe6/9n7i50OCEA3 yLgbFhTLpip2IOIMSSSvo9Q9jMPmELq5JZJBeGp0VxrykGetXjLF2C7Dbb5HWykE I9c3s8gJTiE4bqA4z7s+57gQOdCxoNWccULKG8rHPwtjp1bfq6AV3tp8QwYz0eId o1RjqzumOkSba4cVuMPd =k+9h -----END PGP SIGNATURE----- --=-=-=--