Posted by proppy on January 25, 2010 at 2:25pm
Jump to:
| Project: | OpenSocial Shindig-Integrator |
| Version: | 6.x-1.x-dev |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | active |
Issue Summary
As shown in the attached patch.
| Attachment | Size |
|---|---|
| shindig_integrator_appservice_use_appid.patch | 851 bytes |
Comments
#1
Hi,
I think it is far better to use it from token instead of 4appId because of security reasons. Shindig does not check for any sessions and other private data. It checks for valid token only, so the token is the final reliable entity for shindig.
So, we would like to stick with the current implementation. Please let me know if you have any other reasons to use it from $appId.
#2
Thanks for the reply.
For some reason token->getAppId() does not match $appId in our setup, further debugging will be needed in order to figure it out.