Fakeweb && Shopify - how to handle redirects

[pjammer]

hello again,

I'm using fakeweb with the shopify_app plugin, which is simply a
wrapper, with some views, for their shopify api.

I'm trying to follow the twitter oauth examples i've found for using
fakeweb and twitter, as the shopify login process is similar, ableit
they don't call it oauth.

Process
1. provide shop name on my app
2. hit authenticate button
3. your shop gets authenticated using an api key. if that key matches
the one in a previously allowed store, you are authenticated.
4. you are sent back to my app from shopify, to a /login/finalize url,
complete with authenticity token.

So that is the process in a nut shell.

when i use curl -i "http://shop.myshopify.com/admin/api/auth?
api_key=fe1424abb2f9441e1fdefde4fe200c49f" > shopify_auth_response, i
get a 302 in the response file. when i then use the -u user:password,
i get the same thing.

the redirect goes to shopify's login page, but then if i curl to that
login url shop.myshopify.com/admin/login, i go to their home page...

as you can tell i'm probably not doing this right at all. I deduced
the urls from the shopify_app comments and such, and am probably going
to the wrong ones. How would you fakeweb veterans determine which url
to fake? and how do you go about getting the proper response?

thanks