Is it possible to get the Twitter Id of current logged in user with out authentication


#1

I try to integrate Twitter OAuth 1.0 with my application. Now i can get the token and pass the account verification step. But when I try to log in again my application require to get the permission from twitter again and again. Is it possible to skip this page when I come back to login again.

Any Idea?


#2

Sounds like you’re application is saving the users tokens in the session. You need to save access_token and access_token_secret outside of the session. First question, is the application yours and only yours, or is it released for public use?

If it’s yours and you’re simply using it on localhost put the tokens in a cookie. You could also put the tokens in your server side configuration, but a cookie allows you to delete the cookie and log in as a different user. It sounds like you’re still early in development and this may be your best bet at this point.

If it is a public application, I think you need to store the access token secrets in a server side database, and the access tokens in a cookie. There are many security issues involved with storing the access tokens, and any sort of multiuser system is beyond my pay grade.