I’ve pasted this into my MXML file, but I’m getting hundreds of errors. Do you know why?

import org.flaircode.oauth.*;
import org.iotashan.oauth.*;
import org.iotashan.utils.*;
import flash.net.URLLoader;

private var consumerKey:String = “myAPIKey”; // hidden for privacy purposes
private var consumerSecret:String = ” myAPISecret”; // hidden for privacy purposes

// create OAuth
oauth:IOAuth = new OAuth(consumerKey, consumerSecret);

// get request token
var loader:URLLoader = oauth.getRequestToken(“https://myapi.req_tok.url”);
loader.addEventListener(Event.COMPLETE, requestTokenHandler);

function requestTokenHandler(e:Event):void
{
requestToken = OAuthUtil.getTokenFromResponse(e.currentTarget.data as String);
var request:URLRequest = oauth.getAuthorizeRequest(“myapi.auth.url”, requestToken.key);
// opens website where user has to login on Twitter and gets 6 digit pin code
navigateToURL(request, “_blank”);
}

function getAccessToken(pin:int):void
{
var loader:URLLoader = oauth.getAccessToken(“https://myapi.access.url”, requestToken, {oauth_verifier:pin});
loader.addEventListener(Event.COMPLETE, accessTokenHandler);
}

function accessTokenHandler(e:Event):void
{
accessToken = OAuthUtil.getTokenFromResponse(e.currentTarget.data as String);
// TODO store accessToken.key and accessToken.secret in EncryptedLocalStorage for all further requests
}

Thanks in advance.

For SWF application, how you can solve the sandbox problem?

Thanks for the great library! I was able to use it successfully in an AIR app to authenticate to Twitter. But have you ever tried authenticating to any Google Data APIs using your library?

The only changes to authenticate to Google seem to be the addition of a couple of parameters – scope, which indicates which set of apis (Calendar, Gmail, etc) you want to use, and oauth_callback – which Twitter doesn’t appear to need, but Google seems to need it set either as the URL of a web app, or the string “oob” to indicate PIN-entry authentication.

(see http://code.google.com/apis/accounts/docs/OAuth.html and http://code.google.com/apis/accounts/docs/OAuth_ref.html for details on the Google implementation)

It seems like it should be very straightforward to authenticate to Google, but I’ve been banging my head against a wall! According to all their docs, I’m doing everything right. And I’ve compared against requests made with their OAuth Playground (http://googlecodesamples.com/oauth_playground/index.php) – where you can go through the authentication process and see all requests, headers, strings to be signed, etc. My requests and responses as far as I can tell look just like theirs! Same string to be signed, params in the same order, it all looks good. But when I get to the final step to get an access token, I always receive a response of 400 – “The token is invalid” – no parameter errors, or signature errors, just this cryptic error.

I don’t know if Google sees something strange in requests coming from an AIR app, or there are some undocumented differences Google requires for installed apps – I’m stumped.

It would obviously be fantastic to build AIR apps that interact with the Google Data APIs, but I’m out of ideas. Do you have any insights or experience here? Cheers…