{"id":1386,"date":"2018-01-19T19:22:46","date_gmt":"2018-01-19T19:22:46","guid":{"rendered":"http:\/\/goofy-trucks.flywheelsites.com\/upgrading-basic-twitter-authentication-to-oauth-with-php\/"},"modified":"2018-01-19T19:24:45","modified_gmt":"2018-01-19T19:24:45","slug":"upgrading-basic-twitter-authentication-to-oauth-with-php","status":"publish","type":"post","link":"https:\/\/phpbuilder.com\/upgrading-basic-twitter-authentication-to-oauth-with-php\/","title":{"rendered":"Upgrading Basic Twitter Authentication to OAuth with PHP"},"content":{"rendered":"
\n
\n
By Sachin Khosla<\/div>\n
on June 25, 2010<\/div>\n<\/p><\/div>\n
\n
Twitter provides an API for developers to build applications on top of it. The API has supported basic authentication over HTTP, but beginning in June 2010 Twitter is discontinuing basic authentication and migrating all Web and desktop applications to OAuth<\/a> (Open Authorization).<\/div>\n
Although simpler to implement, basic authentication had its drawbacks. If your Web application uses basic authentication, your users will have to provide their credentials to get access to your website. Their credentials then will be passed over the network as a clear text — not a very secure or reliable method of authenticating a user. In addition, this method does not provide a persistent authentication token.<\/div>\n
OAuth on the other hand provides a more secure way to authenticate users and allows a persistent access token, which application developers can then consume. For now, Twitter does not allow this authentication token to expire, meaning users do not have to log in every time they use the same application. The token becomes invalid only when a user rejects the application from his or her application settings.<\/div>\n

What Is OAuth and How Does It Work?<\/h2>\n
OAuth (Open Authorization) is an open standard that allows anyone to share resources securely from one site (which supports OAuth) to another third-party website. With OAuth, the user does not have to give his\/her credentials to the third-party website.<\/div>\n
Figure 1 illustrates how Twitter allows OAuth to access its user details.<\/div>\n


\n
\"How
Click here for larger image<\/em><\/font><\/a>
\n
Figure 1.<\/b> How Twitter Employs OAuth<\/font><\/p>\n

If you have a Twitter API-based application, here is how it allows OAuth to access your users’ details:<\/div>\n
    \n
  1. When a user accesses your application, you need his\/her details (such as Twitter handle, friends, followers, etc.). To do so, your application sends a request to Twitter and gets a one-time request token, which is then used to create the authorization link.<\/li>\n
  2. The user clicks on the authorization link and gets redirected to the Twitter website. When the user logs in, Twitter asks him or her whether it should allow XYZ<\/em> application to access the user’s data.<\/li>\n
  3. When the user grants your application access to his or her data, Twitter sends back an access token and an access token secret. Now your application does not require the user’s credentials to access his or her Twitter data. All it needs is the access token and the access token secret. You can store these in the database and create a cookie so that whenever the user visits you can recognize that user.<\/li>\n
    Now that you know what OAuth is and have a fair idea of how it works, let’s move ahead.<\/div>\n<\/ol>\n

    Getting Started with Twitter OAuth<\/h2>\n
    In this section, we will use Twitter’s OAuth API to authenticate an application and interact with a demo application. Follow these instructions to get started:<\/div>\n
      \n
    1. Register your application at twitter.com\/apps<\/a>. Be sure to give the correct callback URL, because this is where the user will be redirected after a successful authentication. Also take note of the consumer key<\/em> and consumer secret<\/em>, which will be provided after registering.<\/li>\n
    2. Now that you have successfully registered your application, download the OAuth library and the wrapper class (contained in a zip file). These will help you interact with the Twitter API.<\/li>\n<\/ol>\n
      Extract the zip file and you should see the following files.<\/div>\n
        \n
      1. OAuth.php<\/tt><\/li>\n
      2. TwitterAPI.php<\/tt><\/li>\n
      3. Index.php<\/tt><\/li>\n
      4. Config.php<\/tt><\/li>\n
      5. Callback.php<\/tt><\/li>\n
      6. README<\/tt><\/li>\n<\/ol>\n
        You first need to configure your application. To do so, open config.php<\/tt> and input the CONSUMER_KEY<\/code> and CONSUMER_SECRET<\/code> provided by Twitter when you registered your application. Also, specify the CALLBACK_URL<\/code> to which Twitter should redirect users after successful authentication. Specifying the URL here will override the one you provided during the application registration process.<\/div>\n<\/div>\n

        <\/p>\n

        \n
        1<\/div>\n
        | <\/div>\n
        2<\/a> <\/div>\n
        Next Page \u00bb<\/a><\/div>\n<\/div>\n

        Download: oauth-twitter.zip<\/a>\n <\/div>\n","protected":false},"excerpt":{"rendered":"

        Twitter is dumping basic authentication for OAuth. Find out how to migrate all your Twitter applications to OAuth using<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-1386","post","type-post","status-publish","format-standard","hentry","category-tutorials"],"_links":{"self":[{"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/posts\/1386","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/comments?post=1386"}],"version-history":[{"count":2,"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/posts\/1386\/revisions"}],"predecessor-version":[{"id":2407,"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/posts\/1386\/revisions\/2407"}],"wp:attachment":[{"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/media?parent=1386"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/categories?post=1386"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/phpbuilder.com\/wp-json\/wp\/v2\/tags?post=1386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}