{"id":706,"date":"2007-03-05T18:22:29","date_gmt":"2007-03-06T02:22:29","guid":{"rendered":"\/?p=706"},"modified":"2007-03-05T18:22:29","modified_gmt":"2007-03-06T02:22:29","slug":"blog-posting-delegation-and-third-party-auth","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=706","title":{"rendered":"Blog posting delegation and third-party auth"},"content":{"rendered":"<p>LesOrchard at<strong>&nbsp;<a href=\"http:\/\/decafbad.com\/blog\/2007\/03\/05\/blog-posting-delegation-and-third-party-auth\">0xDECAFBAD<\/a><\/strong><a href=\"http:\/\/decafbad.com\/blog\/2007\/03\/05\/blog-posting-delegation-and-third-party-auth\"> <\/a>(&#8230;<em>t\u00e2\u20ac\u2122s all spinning wheels and self-doubt until the first pot of coffee) <\/em>expands on the idea of how delegation can be used to improve our blogging experience:<\/p>\n<blockquote><p>Here\u00e2\u20ac\u2122s something I\u00e2\u20ac\u2122ve been meaning to post about, brought back to mind from <a href=\"\/?p=701\">Kim Cameron\u00e2\u20ac\u2122s post on \u00e2\u20ac\u0153Wrong-headed impersonation\u00e2\u20ac\u009d<\/a>:<\/p>\n<p style=\"margn-left: 30px\">I wish that blog posting interfaces (ie. <a href=\"http:\/\/www.xmlrpc.com\/metaWeblogApi\">MetaWeblog API<\/a> and <a href=\"http:\/\/www.ietf.org\/html.charters\/atompub-charter.html\">Atom Publishing Protocol<\/a>) offered a way to delegate blog posting to a 3rd party app (desktop or web) in such a way as to avoid providing one\u00e2\u20ac\u2122s login details (i.e. user name and password). For instance, consider both <a href=\"http:\/\/www.flickr.com\/services\/api\/auth.spec.html\">Flickr\u00e2\u20ac\u2122s<\/a> and <a href=\"http:\/\/upcoming.org\/services\/api\/token_auth.php\">Upcoming\u00e2\u20ac\u2122s<\/a> 3rd party token-based authentication \/ authorization schemes.In particular, I\u00e2\u20ac\u2122m looking at things like del.icio.us\u00e2\u20ac\u2122 own Daily Blog Post and others. These can be used to auto-post content to one\u00e2\u20ac\u2122s blog generated elsewhere &#8211; but at the price of sharing login details. Granted, you can mostly trust these 3rd parties not to do anything nasty with your credentials, but it would be nice not to have to.<\/p>\n<p>I figure that something RESTful like extending HTTP authentication (ala <a href=\"http:\/\/www.xml.com\/pub\/a\/2003\/12\/17\/dive.html\">Atom Authentication<\/a>) with a token scheme could be interesting, and possibly fit nicely into <a href=\"http:\/\/www.ietf.org\/html.charters\/atompub-charter.html\">APP<\/a> itself. It could probably be retrofit into the <a href=\"http:\/\/www.xmlrpc.com\/metaWeblogApi\">MetaWeblog API<\/a> by specifying a per-app user name and password. I can imagine a WordPress admin plugin that issues approved authentication tokens to restrict the categories and other activities allowed by 3rd party apps.<\/p>\n<p>Just something I\u00e2\u20ac\u2122m thinking about, as more services may or may not grow into delegated blog posting.<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Les wants a way to have services act on his behalf without having to give them his login details (i.e. user name and password). <\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[12,6,11,5],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/706"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=706"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/706\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=706"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=706"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=706"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}