The resources are as follows:
- jquery1342660045312= > Sina's OAuth API address
- Sina Weibo open Platform OAuth licensing solution (including code )
The tangled problem is this:
- Sina uses is OAuth 1.0, before the user authorizes the authentication, needs the gentleman to become Request_token
- How should request_token be stored?
- The recommendations in the SDK are stored in session, but if I have multiple front-end machines, DNS parsing is not reliable, then how many of my machines synchronized session?
- Session stored in the database to avoid this problem, but the problem is that my business does not need to use the database, in order to store a temporary session of the library, it is not cost-effective.
- stored in cookies, the problem of multiple front-end machines do not care, but whether there will be unsafe factors?
- Can a cookie store a string that is Memcache key, and is it possible to store this one-off request_token by mem?
- Other people get Cookie,cookie can add some verification, such as the signature and other things, is not a random transformation can destroy my program.
The analysis process is roughly as above, concrete how to realize still tangled!
