Hi, Thanks for making the Auth stuff available! I asked some Yahoo'er some months ago if it was in the cards and was disappointed to be told that it wasn't;...
Adam, I was having the same issue - then I noticed "userhash". The documentation says it's unique for the user and the app_id. As far as I can tell, that's our...
I see that but I was asking about read-only access to Yahoo! Mail not Yahoo! Pictures. Better yet -- I'd like read-only access to the from and subject and not...
But I want read-only access to Yahoo! Mail not Yahoo! Photos. Further, it'd be best if I had read-only access to only the from and header fields and not the...
What I would really love to do is use Yahoo groups as a backend for the forums on my websites. If Yahoo could do this then thousands of Yahoo groups could pop...
Hey John, I take that as a feature request :) We are working with different parts of the company to open up APIs and of cause we want to know what APIs are...
Hi Harry, I like to see BBAuth more like "Yahoo opens up their authentication" rather than "building yet another single sign-in solution" although it can be...
I'm not sure how many "web developers of the world" you're speaking for, but if a user base of 200+ million users isn't compelling enough warrant a bit of...
There isn't a way to do that yet, but a few people asked for it (and similar things) at our Open Hack Day this past weekend. People would also like to get a...
... The irony is that Yahoo! BBAuth, while it has an awful name, is a lot easier to implement (IMHO, of course) than OpenID ... and OpenID is remarkably...
Irony? Nah. We intended it to be easy all along. The easier something is, the more likely people will adopt it. We've seen that hold true over and over and...
I second that request. What I would like to be able to do is grant people entrance/permissions on a community website. This community exists of members of...
... Unfortunately, my blog only looks and smells like MT, but is mostly my own code ... I've been gradually reimplementing MT in Tcl to run under AOLserver....
I wrote up a quick post on what I did to get BBAuth working in a Rails project. http://metaatem.net/2006/09/29/using-yahoos-bbauth-with-rails Feedback?...
Hello- I'm trying to use BBAuth for SSO on my site. When using the sample PHP code provided, I am continuously asked for my permission each time I sign in to...
I'm implementing Yahoo! BBAuth for blog comment authentication. I've got enough implemented to get the cookie and WSSID ... now how do I get the corresponding...
We're working on trying to find a better balance in this case. For the moment, we err on the safe side, assuming that if you're sending a user back to us,...
But according to the verify page itself, it says that permission would last 2 weeks. What's the point of granting access for 2 weeks if they're going to be...
... When the user successfully logins the first time, you (the developer) are provided a token that you can use to make authenticated web service calls on...
To clarify -- you, the developer, can store a cookie in the user's browser and attach that to stored session data (in a db, perhaps) to maintain the user's...
Jason has it exactly right. I've implemented such a solution, here: http://kentbrewster.com/ybbs Currently the cookies I'm generating go away after the user...
That doesn't work too well if I'm using Yahoo! as an SSO system. I'd like my users to sign in through Yahoo! as often as they'd like, which would result in...
Actually, it works fine. In the bbauth Drupal module I wrote (soon to be released), the Drupal cookies take over after a valid Yahoo! bbauth login. So, the...
Hm. So I can handle timing out a user after X number of hours (where X < 2 weeks). If after X, I want the user to reauthenticate (via Yahoo, in this case),...
One approach is to save your own cookie in the user's web browser and check that. Yahoo sent you a timestamp and other useful data that you can use to validate...
... I think some people are missing the point. The point is not for yahoo to control how long the user is logged in (though I think that would be fine too.)...