Hot answers tagged oauth
Go to accounts.google.com or google.com/settings Click on the "Security" tab. Under the section "Account Permissions", click on "View all": Click Revoke Access next to the app you wish to remove permission from.
Go to your account settings. Click on Security on the left, and then Edit next to "Authorizing applications and sites" Revoke the site you wish to remove.
They added OAuth support around April of 2010 to make it easier for third-party developers to work with their site. IMHO it was a very good move on their part. While they haven't (AFAIK) announced any plans to discontinue Facebook Connect, they are moving forward more aggressively with OAuth and their Graph API as the new way to get things done. Basically, ...
The string itself doesn't contain personal information but it points to where information can be obtained. Fear not, Google will tell you what information will be passed (depends on what the target application requires) and ask you for your approval beforehand, each time you use your OAuth/OpenID on a new site, so if someone just have the link, won't learn ...
no the url does not contain email id
Twitter auth has two levels, read and read write. You are told the level they want before you authorise the website. With write they can do pretty much anything they like, however you can deauthenticate them in twitter, so itisn't in the sites beat interest.
April 21, 2010. See: The Next Evolution of Facebook Platform We've also made it much easier to integrate with Facebook by using a simplified, standards-based method for authentication and authorization.We've adopted OAuth 2.0, a standard we've co-authored with the open community, including representatives from Google, Twitter, Yahoo, and ...
Why would it need my password if it uses OAuth? Some twitter application that have not been updated to support OAuth fully can use the xAuth API to obtain OAuth credentials from a username and password. This is only required once per application installation as the OAuth token that it returns does not expire. How they could be prevented from storing ...
What I do in order to mitigate this (because I'd rather applications be written to use the standard protocols of IMAP and SMTP) is to use Google's two-factor authentication. When you turn that on, it enables something they call "application specific passwords", which are limited in scope and can be revoked at any time. These application specific passwords ...
In general, the ability to "manage" (and not just "view") your GMail includes the various actions that you might perform manually when interacting with your account via the standard web-interface. For example, such actions can include deleting, starring, labeling, and archiving individual emails -- to name just a few. I personally do not use Slice.com, and ...
They use OAuth2 for authentication and authorization. There are some slight variations on certain services, for example Google Drive. It depends on exactly which service you want to use.
OpenID is a login service specification and does not specify anything about contacts. You're trying to use the wrong tool here. Longer explanation: OpenID is used to identificate the user When the user's identity is confirmed, Google logs you into Gmail Once you are logged into gmail, you can fetch the user's contacts As you see, OpenID has nothing to ...
First, they cannot technically prevent the application from storing your password. Now, if they are a well-behaved local application, the password is only processed (or stored) on your computer and sent to Twitter. That is very different from a service provider storing your password on their servers, which is the problem OAuth was originally designed to ...
Only top voted, non community-wiki answers of a minimum length are eligible