I mean, has anything they've done made sense? They don't ... • Aaron Parecki

horseyfeelings https://twitter.com/horseyfeelings • Feb 3
Is @Twitter also monetizing OIDC/Log In capability? That does not make sense. They are just acting as an identity provider in this context and I’m not sure putting a paywall for user initiated profile sharing consent to 3rd parties is a right move. @elonmusk?

I mean, has anything they've done made sense? They don't support OIDC which means you have to use the same OAuth developer portal to get API access and use Log In with Twitter. Are they going to separate the two by next week?

Portland, Oregon • 43°F

Thu, Feb 2, 2023 9:12pm -08:00

1 like 3 replies
- Andrew Escobar (Andres)
Have you written a response to this? Let me know the URL:
- horseyfeelings twitter.com/horseyfeelings
  
  Monetization can be enforced at api gateway. but depends on how profile api proxy is configured at twitter’s gateway. Is it bundled with other “pay for” APIs? if yes, then good luck to folks who have this capability enabled as a RP where twitter is IDP. hello @elonmusk…
  
  Fri, Feb 3, 2023 6:49pm +00:00 (via brid.gy)
- Dick Hardt twitter.com/DickHardt
  
  Logging in with Twitter is calling the profile API - hard to imagine how they will easily allow that specific API call be free and not others.
  
  Fri, Feb 3, 2023 3:31pm +00:00 (via brid.gy)
- horseyfeelings twitter.com/horseyfeelings
  
  umm, putting a paywall to developer portal access is one thing, but invalidating already released tokens (which WILL expire), clientIDs and secrets specially for profile sharing flow is just plain stupid. Twitter does now “own” its user profile data, users do. I see lawsuits.
  
  Fri, Feb 3, 2023 12:54pm +00:00 (via brid.gy)

Posted in /replies using monocle.p3k.io