surjit / oauth

Automatically exported from code.google.com/p/oauth
0 stars 0 forks source link

Python library doesn't provide a way of handling additional parameters. #46

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
The OAuth specification allows the service provider to accept or require
additional parameters when issuing a request token.  The service provider
would generally want to store that information in its token store for
future reference (e.g. to make decisions about resource access).

The OAuthServer / OAuthDataStore split doesn't seem to provide a way to
store this information since the OAuthDataStore.fetch_request_token()
method doesn't get passed this information.

The spec also allows for additional parameters passed to the authorisation
URL and access token URL, so it might make sense to pass those parameters
to fetch_access_token() too.  I am not sure whether
authorize_request_token() needs them.

Original issue reported on code.google.com by james.he...@gmail.com on 9 Oct 2008 at 6:18

GoogleCodeExporter commented 9 years ago

Original comment by jmkrist...@gmail.com on 22 Oct 2008 at 5:23

GoogleCodeExporter commented 9 years ago
For additional params along with the request token, I would recommend overriding
those methods in your own OAuthServer and OAuthDataStore.

I could update the library to accept additional params, but you'd have to 
override
those methods to use those params anyways.

Original comment by leah.culver on 14 Jan 2009 at 10:44