Tumblr API / Oauth 1.0a ?
Added by Matthew Kettlewell almost 11 years ago
I was wanting to connect Wt to the Tumblr API, however it appears that Tumblr uses Oauth 1.0a and Wt is using Oauth 2.0
https://www.tumblr.com/docs/en/api/v2#auth
Is oauth 2.0 backwards compatible? If not, are there any work arounds?
Also, I've never used oauth / Tumblr API, so maybe I'm thinking about this wrong, but it seems that I would need an entry point that connects to Tumblr to get verified and Tumblr calls a verify entry point, and then I store the verified credentials to disk/db and have a separate entry point(s) for making actual calls to Tumblr with the verified credentials... is that about right, or am I way off base?
Thanks for any pointers / assistance...
Matt
Replies (1)
RE: Tumblr API / Oauth 1.0a ? - Added by Koen Deforche almost 11 years ago
Hey Matt,
No, OAuth2 is not compatible with OAuth1. I would have hoped that everyone would have moved to OAuth2 but it seems that this is not the case.
What you describe seems correct. The way to implement this is perhaps also similar to how OAuth1 has been implemented as it seems to involve the same concepts, but OAuth1 uses signatures to prove authentication, rather than a 'token' as in OAuth2.
If you would implement this in Wt, then we would like to consider to include it in Wt::Auth, and provide help in implementing this.
Another notable user of OAuth1 (not moving to OAuth2) is Twitter, so OAuth1 seems to have a firm adoption.
Regards,
koen