all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: Ted Zlatanov <tzz@lifelogs.com>
To: emacs-devel@gnu.org
Subject: Re: OAuth2 implementation in Elisp
Date: Mon, 26 Sep 2011 12:00:23 -0500	[thread overview]
Message-ID: <878vpb44t4.fsf@lifelogs.com> (raw)
In-Reply-To: 87ehz32vm5.fsf@keller.adm.naquadah.org

On Mon, 26 Sep 2011 17:04:18 +0200 Julien Danjou <julien@danjou.info> wrote: 

JD> On Mon, Sep 26 2011, Ted Zlatanov wrote:
>> I hope I don't have to know how to implement OAuth2 in order to
>> understand your answer to that question.

JD> No. But you have to understand how it works and how to use it at least,
JD> so your questions would make sense. Right now you are just proving you
JD> know nothing about OAuth 2 and that you don't trust my judgement on
JD> implementing things.

That's a stretch based on my questions, especially the latter part.

JD> Which could put me in a bad mood.

Sorry to hear that.  I am interested in a) using this code myself, and
b) making sure users don't send me questions like "what do I do now?
Emacs is asking me to enter some code."  From my viewpoint what you
posted will not help with (b).  Upsetting you was not intended.

JD> Now, I'll explain why we can't make Emacs act like a Web apps to you.

JD> When the client is a native client (like Emacs), the user is sent to an
JD> URL where the OAuth provider prints the following:

JD> "The application $REGISTERED-APPLICATION-NAME is trying to access your
JD>  data in $THIS-WAY. Is this OK?

JD>   [YES] [NO]"

JD> If the user clicks yes, an authorization code is printed, the user give
JD> it to Emacs, and Emacs can obtain an access token from the OAuth
JD> provider to access the user data. Point.

JD> If the client is a Web application, the user is sent to the same URL,
JD> but when clicking [YES], no code are printed: instead the user is
JD> redirected by to the Web application.

This is what I saw in the IETF draft.  It is the better workflow.
Asking users to retype visible strings in Emacs is... unusual for an API.

Why can't Emacs pretend to be a Web application?  Is it somehow less
capable than other web browsers?

Thanks
Ted




  parent reply	other threads:[~2011-09-26 17:00 UTC|newest]

Thread overview: 42+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-09-22 21:55 OAuth2 implementation in Elisp Julien Danjou
2011-09-22 21:59 ` Deniz Dogan
2011-09-22 22:00   ` Deniz Dogan
2011-09-22 22:15     ` Julien Danjou
2011-09-25 11:25       ` Ted Zlatanov
2011-09-25 12:56         ` Julien Danjou
2011-09-25 13:31           ` Ted Zlatanov
2011-09-25 17:14             ` Karl Fogel
2011-09-25 20:50             ` Justin Lilly
2011-09-26  9:52             ` Julien Danjou
2011-09-26 14:36               ` Ted Zlatanov
2011-09-26 15:04                 ` Julien Danjou
2011-09-26 15:15                   ` Lars Magne Ingebrigtsen
2011-09-26 15:17                     ` Julien Danjou
2011-09-26 16:24                       ` Lars Magne Ingebrigtsen
2011-09-27  9:40                         ` Julien Danjou
2011-09-27 23:25                           ` Richard Stallman
2011-09-26 17:47                       ` joakim
2011-09-26 19:09                         ` Ted Zlatanov
2011-09-26 19:55                           ` Tassilo Horn
2011-09-26 19:59                             ` Lars Magne Ingebrigtsen
2011-09-26 20:29                               ` Tassilo Horn
2011-09-26 20:31                                 ` Lars Magne Ingebrigtsen
2011-09-26 21:26                                 ` Ted Zlatanov
2011-09-27  9:43                                 ` Julien Danjou
2011-09-27  9:50                                   ` joakim
2011-09-27 10:14                                     ` Ted Zlatanov
2011-09-27 12:22                                       ` joakim
2011-09-27 20:17                                         ` Ted Zlatanov
2011-09-26 17:00                   ` Ted Zlatanov [this message]
2011-09-28  3:35                     ` Vijay Lakshminarayanan
2011-09-26 21:23                   ` Ted Zlatanov
2011-09-27 10:18                     ` Ted Zlatanov
2011-09-27 11:42                       ` Julien Danjou
2011-09-27 20:20                         ` Ted Zlatanov
2011-09-25 20:02           ` Deniz Dogan
2011-09-23  4:34 ` Stefan Monnier
2011-09-23  7:31   ` Julien Danjou
2011-09-23  8:23     ` Andreas Röhler
2011-09-23  8:48     ` Michael Albinus
2011-09-23  9:02       ` Julien Danjou
2011-09-23  9:32         ` Michael Albinus

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=878vpb44t4.fsf@lifelogs.com \
    --to=tzz@lifelogs.com \
    --cc=emacs-devel@gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.