changeset 6:f0273e301ee4

added callback confirmation assertion
author Atul Varma <avarma@mozilla.com>
date Sat, 12 Jun 2010 19:12:31 -0700
parents 6cd78716bc67
children c6aef586ab82
files twitter_client.py
diffstat 1 files changed, 4 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/twitter_client.py	Sat Jun 12 18:28:46 2010 -0700
+++ b/twitter_client.py	Sat Jun 12 19:12:31 2010 -0700
@@ -33,6 +33,10 @@
 
             request_token = dict(urlparse.parse_qsl(content))
 
+            if ('oauth_callback_confirmed' not in request_token or
+                request_token['oauth_callback_confirmed'] != 'true'):
+                raise Exception("Oauth callback must be confirmed.")
+
             self.request_tokens[request_token['oauth_token']] = request_token
 
             # Step 2: Redirect to the provider.