Qn: Oauth + private photos & authorization

swishswish Registered Users Posts: 2 Beginner grinner
Hi!! This is smugmug+oauth newbie, so plss don't mind if I miss something simple :)

I tried Oauth using python and got to the point of getting request token. I am stuck at authorize part. Without authorizing the request token, I can't get access token. Went thru docs and unsure if what I want is possible.

I have portfolio gallery that is private. I want to show private photos to users thro' my webapp. My webapp has an user login of its own. So in this case my webapp is Oauth Consumer. But I don't want users of my webapp to login to smugmug or have a smugmug account. They just view private photos through my webapp. So can my webapp also be Oauth User that does authorization automatically and allows display of my private photos in the webapp? Is this possible? If yes how to do automatic auth?

Thanks in advance.

Comments

  • devbobodevbobo Registered Users, Retired Mod Posts: 4,339 SmugMug Employee
    edited September 19, 2008
    I can't do an automatic auth, cuz that sort of circumvents what we are trying to achieve.

    There are two ways you could go.

    1. Manually construct the urls etc, to authorize your request token with your account...then obtain an access token, which your web app can use from then on. Access Tokens only expire when revoked from the control panel.

    2. Add some sort of admin section to your web app, that does the whole auth process and saves the access toekn into a db or somethinng.

    I hope this helps. I'm happy to answer any more questions.

    Cheers,

    David
    David Parry
    SmugMug API Developer
    My Photos
  • swishswish Registered Users Posts: 2 Beginner grinner
    edited September 20, 2008
    Thanks for reply, David!! I understand automatic auth means going around oauth.

    Didn't know access token expire only when revoked from control panel - thanks for info. That means access token can last forever?

    I will try with manual constructed urls. What are the parameters to manually authorize?

    Thanks again!!
Sign In or Register to comment.