OAuth wrap authentication error, when trying FriendFeed sample app

8 views
Skip to first unread message

egilchri

unread,
Feb 3, 2010, 9:57:04 AM2/3/10
to OAuth WRAP WG
Hello,

As of yesterday, I started getting authentication errors, when
using Bret Taylor's Google App Engine example.

http://github.com/finiteloop/friendfeed-wrap-example/blob/master/friendfeedwrap.pyI

The failure comes when the /login callback is invoked with the wrap
access code:

code = self.request.get("wrap_verification_code")
url = "https://friendfeed.com/account/wrap/access_token?" + \
urllib.urlencode(dict(
wrap_client_id=FRIENDFEED_API_TOKEN["key"],
wrap_client_secret=FRIENDFEED_API_TOKEN["secret"],
wrap_callback=self.request.host_url + "/login",
wrap_verification_code=code,
))

Could this mean that the FriendFeed API is not passing back valid
wrap_verification_code ?

I admin to being a bit confused here. After having this fail in my app
I created a test app that is exactly the same as Bret Taylor's
example, and it still seems to fail.

Thanks,

Ted Gilchrist

Luke Shepard

unread,
Feb 3, 2010, 1:36:09 PM2/3/10
to oauth-...@googlegroups.com
Ted- thanks for the report. I can confirm that the sample app isn't working correctly. We'll take a look at it and get back to you.

> --
> You received this message because you are subscribed to the Google Groups "OAuth WRAP WG" group.
> To post to this group, send email to oauth-...@googlegroups.com.
> To unsubscribe from this group, send email to oauth-wrap-w...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/oauth-wrap-wg?hl=en.
>

egilchri

unread,
Feb 3, 2010, 6:18:15 PM2/3/10
to OAuth WRAP WG
Hi Luke,

I may have jumped the gun, but it looks to me like it's working
again. BTW, my hope is that my work with FriendFeed will pave the way
for porting my app to Facebook.

Thanks,

Ted

On Feb 3, 1:36 pm, Luke Shepard <lshep...@facebook.com> wrote:
> Ted- thanks for the report. I can confirm that the sample app isn't working correctly. We'll take a look at it and get back to you.
>
> On Feb 3, 2010, at 6:57 AM, egilchri wrote:
>
> > Hello,
>
> >   As of yesterday, I started getting authentication errors, when
> > using Bret Taylor's Google App Engine example.
>

> >http://github.com/finiteloop/friendfeed-wrap-example/blob/master/frie...

Luke Shepard

unread,
Feb 3, 2010, 7:07:15 PM2/3/10
to oauth-...@googlegroups.com
Thanks Ted - yep, it's working again. Ben Golub from Friendfeed posted to the list this morning but his message didn't get through. He said:

> Yeah it was a rate issue caused by App Engine shared IPs. I've reset the limits for that ip.
>
> In most handlers we use the application id (or a combination of application id + user id) for the rate key but we weren't for the access_token handler. I'm pushing a fix so this won't happen again.
>
> Thanks for the heads up

Benjamin Golub

unread,
Feb 3, 2010, 6:20:30 PM2/3/10
to oauth-...@googlegroups.com
Hi Ted,

I actually pushed a fix to FriendFeed earlier today to solve the problem. We were incorrectly applying rate limits to the IP address (shared on Google App Engine) instead of the app id.

I'm excited to see what you build and thanks for the report!

-Ben

Benjamin Golub

unread,
Feb 3, 2010, 3:53:52 PM2/3/10
to OAuth WRAP WG
Thanks for the report Ted. There was a bug with rate limits on
FriendFeed. I pushed a fix so limits are correctly applied to the
application and not the IP address (in this case shared across all of
App Engine).

Can you give it a try again?

On Feb 3, 9:57 am, egilchri <egilc...@gmail.com> wrote:
> Hello,
>
>    As of yesterday, I started getting authentication errors, when
> using Bret Taylor's Google App Engine example.
>

> http://github.com/finiteloop/friendfeed-wrap-example/blob/master/frie...

Reply all
Reply to author
Forward
0 new messages