Support OAuth for services that have it

Boris Mann - August 18, 2008 - 09:35
Project:Contact Importer
Version:5.x-1.x-dev
Component:Miscellaneous
Category:feature request
Priority:normal
Assigned:Unassigned
Status:active
Description

Putting in email/username + password for a third party service is insecure for users. OAuth was designed to specifically solve this issue, and there is a Drupal OAuth module.

It would be great to support this for services that have it (e.g. Google, Flickr, Pownce, etc.)

#1

dalin - November 13, 2008 - 07:49
Version:<none>» 5.x-1.x-dev
Component:Code» Miscellaneous

Hi Borris,
OAuth is a really great idea, but to my knowledge none of the big email providers are using it. I also agree that entering your email password on a webform somewhere is not good practice.

I wrote Contact Importer to be a tool for people to easily fetch the email addresses of their friends to put into a send-to-a-friend form. There is really very little code here, it is simply a wrapper to integrate other tools (I've been calling them engines) that do the actual lookup. If there's a tool that uses OAuth for this kind of information retrieval I'd be happy to include it as another supported engine for Contact Importer.

 
 

Drupal is a registered trademark of Dries Buytaert.