Topic on Help talk:OAuth

FNDE (talkcontribs)

Hi there, I have a question about the OAuth-session. When I close the browser window, the session cookie will be deleted (look at this PHP-example). Is there any possibility, to "renew" the login without passing the whole process (click on grant access)? Thank you very much!

BDavis (WMF) (talkcontribs)
FNDE (talkcontribs)

This is what I'm looking for, thank you! Is there a way to pass the authentication without a redirect? Maybe with CURL?

BDavis (WMF) (talkcontribs)

No, the user's browser is needed to interact with the OAuth server and get the request signed. You can however store the tokens that are returned from the handshake callback. They do not expire, but can be revoked by the user via Special:OAuthManageMyGrants. On your app side you will still need some way to re-associate the user and the credentials that you persist.