<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div id="yiv844154042"><div><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: times new roman,new york,times,serif; font-size: 12pt;"><div id="yiv844154042yui_3_2_0_16_132555513142540"><font id="yiv844154042yui_3_2_0_16_132555513142568" face="Arial" size="2"><b id="yiv844154042yui_3_2_0_16_132555513142567"><span id="yiv844154042yui_3_2_0_16_132555513142550" style="font-weight: bold;">>>From:</span></b> Jesse Monroy <<a rel="nofollow" ymailto="mailto:jesse650@gmail.com" target="_blank" href="mailto:jesse650@gmail.com"><span id="yiv844154042lw_1325556161_0" class="yiv844154042yshortcuts">jesse650@gmail.com</span></a>><br> <b id="yiv844154042yui_3_2_0_16_132555513142576"><span id="yiv844154042yui_3_2_0_16_132555513142575" style="font-weight: bold;">>>To:</span></b> "<a
rel="nofollow" ymailto="mailto:jesse650.diedie@blogger.com" target="_blank" href="mailto:jesse650.diedie@blogger.com"><span id="yiv844154042lw_1325556161_1" class="yiv844154042yshortcuts">jesse650.diedie@blogger.com</span></a>" <jesse650.diedie@blogger.com>; Adrien Lamothe <<a rel="nofollow" ymailto="mailto:a_lamothe@yahoo.com" target="_blank" href="mailto:a_lamothe@yahoo.com"><span id="yiv844154042lw_1325556161_2" class="yiv844154042yshortcuts">a_lamothe@yahoo.com</span></a>> <br><b id="yiv844154042yui_3_2_0_16_132555513142584"><span id="yiv844154042yui_3_2_0_16_132555513142583" style="font-weight: bold;">>>Cc:</span></b> john. sokol <<a rel="nofollow" ymailto="mailto:john.sokol@gmail.com" target="_blank" href="mailto:john.sokol@gmail.com"><span id="yiv844154042lw_1325556161_3" class="yiv844154042yshortcuts">john.sokol@gmail.com</span></a>> <br> <b id="yiv844154042yui_3_2_0_16_132555513142592"><span
id="yiv844154042yui_3_2_0_16_132555513142591" style="font-weight: bold;">>>Sent:</span></b> Wednesday, December 28, 2011 1:06 AM<br> <b id="yiv844154042yui_3_2_0_16_1325555131425100"><span id="yiv844154042yui_3_2_0_16_132555513142599" style="font-weight: bold;">>>Subject:</span></b> Facebook tries to appease frustrated developers | ZDNet<br>
</font> <br>
<span></span></div><div id="yiv844154042"><div id="yiv844154042yui_3_2_0_16_132555513142560"><a rel="nofollow" id="yiv844154042yui_3_2_0_16_132555513142559" target="_blank" href="http://m.zdnet.com/blog/facebook/facebook-tries-to-appease-frustrated-developers/6651"><span class="yiv844154042yshortcuts" id="yiv844154042lw_1325556161_4">>>http://m.zdnet.com/blog/facebook/facebook-tries-to-appease-frustrated-developers/6651</span></a><br><br><br>Sent directly to me by Jesse, but perhaps of community interest.<br><br><div id="yiv1958428101yui_3_2_0_16_132509499668148"><span id="yiv1958428101yui_3_2_0_16_132509499668183">The answer to the problem is in the article: OAuth 2.0. I
only use the new OAuth 2.0 interface, and haven't experienced any problems other than when Twitter had problems implementing it. I also only use social sites for authentication and nothing else, though I plan to use their OAuth RESTful interfaces for things like inviting friends to an app. Also, I
(politely) urge my users to also supply their email addresses along with login
names and passwords in their profiles on my sites, so that in the event
the social site isn't available for whatever reason they can still do a
normal username/password (over ssl) login and can also do a password
reset if needed. I don't force them to do this; if they want to be
completely dependent on some social site to login to my site that is
their prerogative, but don't complain to me if they can't log in because
of some problem with their social site. My Quick Heist game (http://quickheist.net) takes this approach.</span><span><br><br>The social sites want app developers to create exciting apps, to entice new users onto their platforms, but also want control over those users (such control directly translates into power.) The social sites can change their policies at will, such as when Facebook suddenly changed their affiliate marketing policies, a move which immediately impacted revenue of a number of companies with apps bound to the Facebook site (see http://insideaffiliate.net/r-i-p-facebook-ads-april-2010/). It is also possible a social site can decide they don't like your app for whatever reason and revoke your OAuth credentials, at which point you lose ALL your users with no way to contact ANY of them, unless you have given your users the option of supplying (at a minimum) their email addresses, which can then be used to send standard login password resets
allowing the cut off users to get back into your site. At least Facebook supplies users email addresses when they authenticate to your system with OAuth. I've found Facebook to be a better platform overall for supporting third party apps and sites.<br><br><br><br><br><br><br></span></div><br><br></div>
</div></div></div></div></div></body></html>