OAuth over localhost findings.

[Sean Cole (Pi)]

Hey Monte,

The really interesting thing that we could utilise within the OAuth lib,
regardless of whether the redirect is set to secure or insecure, once the
navigation occurs we can capture the parameters returned from the URL. It
would be unreasonable to expect all of our app customers (especially as
many of these are not techie people) to set up a secure server on their
machines just to create a signable a document. For now, I have written my
own library that does work with any secure site, especially as yours is not
available for anything created in less than LC9.

Thanks for reading though. It was an observation I thought you might like.

Sean Cole
*Pi Digital *

On 11 December 2017 at 22:10, Monte Goulding via use-livecode <
use-livecode at lists.runrev.com> wrote:

> Hi Sean
>
> The HTTPS redirect uri requirement does make things a little trickier. A
> quick search indicates that a local HTTPS server is possible (Adobe’s Java
> SDK for sign uses one). I would need to research on the feasibility of
> implementing such a thing in LC though. At a minimum I suspect we would
> need to be able to accept secure connections which we can’t presently.
>
> Cheers
>
> Monte
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>