Jump to content


OpenID and application_id

openid

  • Please log in to reply
3 replies to this topic

metagamerscore #1 Posted 02 June 2019 - 01:15 PM

    Private

  • Player
  • 0 battles
  • 1
  • Member since:
    11-25-2018

For the OpenID, the application_id needs to be set in the the request url. 

 

That would mean that anyone who uses my site will learn my application_id, but usually this is something one wants to keep secret.

 

Another thing is that from the OpenID response, I get to learn the account_id of the player, but not the realm. This makes it difficult to get the list of games from the player. One would have to first check the account_id for .ru, .eu and .com; and then lastly nickname towards .asia (because .asia does not allow lookup from account_id).

 

Is this something that can be looked at?

 

Cheers!

 

Oskar of metagamerscore



Hyster #2 Posted 09 June 2019 - 03:58 PM

    Warrant Officer

  • Player
  • 27454 battles
  • 595
  • [T-S_K] T-S_K
  • Member since:
    02-14-2012
use _POST insted of _GET

Dak28 #3 Posted 25 June 2019 - 11:09 PM

    Sergeant

  • Player
  • 42345 battles
  • 208
  • [HOOT] HOOT
  • Member since:
    08-29-2011
Is my problem or both in post and get parameters are given in get? and on my web app login is not working, as response i get html data instead of redirect to wargaming login page

_1Nomad_ #4 Posted 02 July 2019 - 01:08 PM

    Lance-corporal

  • Player
  • 4565 battles
  • 93
  • [WINNR] WINNR
  • Member since:
    07-22-2017

View Postmetagamerscore, on 02 June 2019 - 01:15 PM, said:

That would mean that anyone who uses my site will learn my application_id, but usually this is something one wants to keep secret.

 

You can't hide your application ID and it is not secret either, so just use it in the URL. The only use for Application ID are the API statistics, and they are not really useful either.







Also tagged with openid

1 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users