Page 2 of 2

Stackmob oAuth without exposing my private key

Posted: Sat Jul 28, 2012 12:42 am
by Harish Narasimhan

Great idea to contact the StackMob folks. Will wait for you to get back. Thanks a lot Max. (Just in case it helps, they now have introduced a default user schema/table in all new accounts and have a login,logout methods - Try creating a new account and you will see these REST API associated with the user schema)


Stackmob oAuth without exposing my private key

Posted: Mon Aug 13, 2012 7:01 pm
by maxkatz

Just to give you an update.

I got the docs and steps from StockMob and almost got it to work. StackMob doesn't (yet, I think) support cross-domain class so we need to use Tiggzi provided proxy. When a request goes through proxy, they require to set special headers. All their headers are in X- format (as per specification) but one of the headers is just 'Host' and the browser complains about that (it's a security error). Until they modify how this works, not much we can do on our end.