From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.devel Subject: Re: OAuth2 implementation in Elisp Date: Mon, 26 Sep 2011 12:00:23 -0500 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <878vpb44t4.fsf@lifelogs.com> References: <87sjnojl7j.fsf@keller.adm.naquadah.org> <4E7BAFA4.8090800@dogan.se> <4E7BAFE2.2090102@dogan.se> <87k490jkaw.fsf@keller.adm.naquadah.org> <87d3eo984j.fsf@lifelogs.com> <87mxdsbx1n.fsf@keller.adm.naquadah.org> <87litc695c.fsf@lifelogs.com> <87vcsfmxzd.fsf@keller.adm.naquadah.org> <87y5xb4bgj.fsf@lifelogs.com> <87ehz32vm5.fsf@keller.adm.naquadah.org> Reply-To: emacs-devel@gnu.org NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1317056452 19056 80.91.229.12 (26 Sep 2011 17:00:52 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Mon, 26 Sep 2011 17:00:52 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Sep 26 19:00:46 2011 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1R8EXt-0005Nt-JY for ged-emacs-devel@m.gmane.org; Mon, 26 Sep 2011 19:00:45 +0200 Original-Received: from localhost ([::1]:56457 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R8EXt-0007Hh-33 for ged-emacs-devel@m.gmane.org; Mon, 26 Sep 2011 13:00:45 -0400 Original-Received: from eggs.gnu.org ([140.186.70.92]:55667) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R8EXp-0007Gw-Jd for emacs-devel@gnu.org; Mon, 26 Sep 2011 13:00:42 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1R8EXo-0006Vb-9T for emacs-devel@gnu.org; Mon, 26 Sep 2011 13:00:41 -0400 Original-Received: from lo.gmane.org ([80.91.229.12]:57807) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R8EXn-0006VT-Uf for emacs-devel@gnu.org; Mon, 26 Sep 2011 13:00:40 -0400 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1R8EXm-0005MJ-Ue for emacs-devel@gnu.org; Mon, 26 Sep 2011 19:00:38 +0200 Original-Received: from 38.98.147.133 ([38.98.147.133]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 26 Sep 2011 19:00:38 +0200 Original-Received: from tzz by 38.98.147.133 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 26 Sep 2011 19:00:38 +0200 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: emacs-devel@gnu.org Original-Lines: 46 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: 38.98.147.133 X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never User-Agent: Gnus/5.110018 (No Gnus v0.18) Emacs/24.0.50 (gnu/linux) Cancel-Lock: sha1:zfN7/6cFFthc2+52UaCOOS42nFc= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 80.91.229.12 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:144319 Archived-At: On Mon, 26 Sep 2011 17:04:18 +0200 Julien Danjou wrote: JD> On Mon, Sep 26 2011, Ted Zlatanov wrote: >> I hope I don't have to know how to implement OAuth2 in order to >> understand your answer to that question. JD> No. But you have to understand how it works and how to use it at least, JD> so your questions would make sense. Right now you are just proving you JD> know nothing about OAuth 2 and that you don't trust my judgement on JD> implementing things. That's a stretch based on my questions, especially the latter part. JD> Which could put me in a bad mood. Sorry to hear that. I am interested in a) using this code myself, and b) making sure users don't send me questions like "what do I do now? Emacs is asking me to enter some code." From my viewpoint what you posted will not help with (b). Upsetting you was not intended. JD> Now, I'll explain why we can't make Emacs act like a Web apps to you. JD> When the client is a native client (like Emacs), the user is sent to an JD> URL where the OAuth provider prints the following: JD> "The application $REGISTERED-APPLICATION-NAME is trying to access your JD> data in $THIS-WAY. Is this OK? JD> [YES] [NO]" JD> If the user clicks yes, an authorization code is printed, the user give JD> it to Emacs, and Emacs can obtain an access token from the OAuth JD> provider to access the user data. Point. JD> If the client is a Web application, the user is sent to the same URL, JD> but when clicking [YES], no code are printed: instead the user is JD> redirected by to the Web application. This is what I saw in the IETF draft. It is the better workflow. Asking users to retype visible strings in Emacs is... unusual for an API. Why can't Emacs pretend to be a Web application? Is it somehow less capable than other web browsers? Thanks Ted