Twitter Authentication Support

2 posts, 0 answers
  1. Kelly
    Kelly avatar
    73 posts
    Member since:
    Apr 2011

    Posted 14 Mar 2014 Link to this post


    What is the status of TBS support for Twitter authentication, please?  The TBS doc mentions a LoginWithTwitter call in the .net SDK and Everlive javascript SDK, but neither of those calls exist in the versions I have, and I think I have the latest.  It looks like Twitter doesn't support OAuth2 yet, and client-side javascript implementation of OAuth1 is not secure - so, is it the general feeling at Telerik that supporting Twitter authentication isn't feasible at this point?  On the other hand, if someone there has pulled it off successfully in a hybrid app, is there an example somewhere?

    Thank you,

  2. Anton Dobrev
    Anton Dobrev avatar
    531 posts

    Posted 14 Mar 2014 Link to this post

    Hello Kelly,

    Thank you for your question!

    You can test with the latest public version of the JavaScript SDK or the REST API. The latest build of the .NET SDK will be live soon. In addtion, we do not have a demo for Twitter authentication right now, but are considering to create one.

    Twitter adheres to OAuth1.0a protocol. The most interesting part that has to be implemented client-side is the signing the request and send it to Twitter, in order to obtain the access token and the token secret for the user and pass them to Backend Services. You are right that there are a lot of recommendations to do this server-side. There are also a lot of community threads on this. A base line there are really the security issues in the client-side implementation and the use of external JS libraries for this.

    In order to test the Backend Services part of the overall user authentication:
    - Register an app with the developer section of Twitter (requires consumer Twitter registration and verified mobile number for this account).
    - Obtain the API key and API secret for the app and place them into the backend project under Settings > User authentication > Twitter
    - Obtain the access token and token secret from Twitter for you own acount
    - Make a request to Backend Services API with them
    - You are already registered into the Users section of the backend services project (note that Twitter will not provide the email of a user)

    Please, let us know if you have further questions!

    Anton Dobrev
    Everlive is now Telerik Backend Services, and is part of the Telerik Platform. For more information on the new name, and to learn more about the Platform, register for the free online keynote and webinar on Wednesday, February 12, 2014 at 11:00 a.m. ET (8:00 a.m. PT)
Back to Top