OpenSocial / spec

OpenSocial Specification #social
http://opensocial.org/
Apache License 2.0
106 stars 11 forks source link

Anonymous Users In An OpenSocial Container #1288

Open mmarum-sugarcrm opened 11 years ago

mmarum-sugarcrm commented 11 years ago

Original author: rbaxte...@gmail.com (May 09, 2012 00:00:14)

The social specs (data, server, gadget) does not have enough definition around how the social APIs should work when the user is not authenticated with the container. The only mention of this scenario is in section 2.1.1.1 of the Social Server API Spec.

"If the User-Id is set to -1, the value for the anonymous user MUST be returned. The value for the name and nickname fields can either be blank or set to an appropriate value such as 'Guest', 'Anonymous', etc."

The spec is ambiguous around other social API use cases.

What happens is a gadget call osapi.people.getViewer? Is the object returned a person with an id of -1? It is also not clear what the name should be, is it Anonymous, Guest, something else? Also what part of the name object should be filled out?

What happens if I call the some of the other social APIs?

https://groups.google.com/forum/?fromgroups#!topic/opensocial-and-gadgets-spec/_j8waMcrteg

Original issue: http://code.google.com/p/opensocial-resources/issues/detail?id=1310