[bloggerDev] Re: sandbox? - Jeff Scudder - com.googlegroups.bloggerdev

6 messages in com.googlegroups.bloggerdev[bloggerDev] Re: sandbox?

From	Sent On	Attachments
greg	07 Apr 2008 11:18
Jeff Scudder	08 Apr 2008 14:23
Greg Borenstein	08 Apr 2008 14:37
Greg Borenstein	08 Apr 2008 15:38
Jeff Scudder	09 Apr 2008 11:50
Greg Borenstein	09 Apr 2008 15:56

Subject:	[bloggerDev] Re: sandbox?
From:	Jeff Scudder (j....@google.com)
Date:	04/09/2008 11:50:57 AM
List:	com.googlegroups.bloggerdev

On Apr 8, 3:39 pm, Greg Borenstein <greg...@gmail.com> wrote:

Jeff,

A bit of progress here: I discovered that if I drop the www. from my domain (which just redirects tohttp://grabb.itanyway), then I get the right grant/deny page and can acquire the token. (Sorry for jumping to the conclusion that it was a problem on your side, I should have known better :)

However, now when I attempt to make requests using that token (for example tohttps://www.google.com/accounts/AuthSubSessionTokento create a session token), I'm receiving 403 responses.

Do I need to make those requests from the server athttp://grabb.it itself? I guess this gets back to the sandbox question I was asking initially: how do I get a token I can use from my local machine for development/testing?

Thanks!

-- Greg

Hi Greg,

The issue might be related to the secure flag, which I saw was set to 1 (true) in your previous post. Are you using any of the additional steps for secure AuthSub?

http://code.google.com/apis/accounts/docs/AuthForWebApps.html#signingrequests

The other thought I had was that your request to upgrade the token might be failing because the token has been used up and expired before making the upgrade request. What is the full error message that you get back with the 403?

Thank you,

Jeff

On Apr 8, 2008, at 2:37 PM, Greg Borenstein wrote:

On Apr 8, 2008, at 2:24 PM, Jeff Scudder wrote:

Hi Greg,

There isn't really a sandbox for the API, but you could test your application by either posting draft posts or by creating a test blog and posting on it instead. Draft posts are described in the developer's guides:

http://code.google.com/apis/blogger/developers_guide_protocol.html#cr...

I'm curious, which language are you using?

Happy coding,

Hey Jeff,

That makes sense in terms of testing out the actual posting API. What I was struggling with when I sent the earlier email was actually getting an AuthSub token in the first place so I could test out posting.

I think I've realized that the problem might actually be you guys rejecting my app's domain since it ends in .it!

If I request this url:

https://www.google.com/accounts/AuthSubRequest?next=http%3A%2F%2Fwww....

I get an access request error page with a message saying 'The "next" parameter was bad or missing.'

However if I request this url:

https://www.google.com/accounts/AuthSubRequest?next=http%3A%2F%2Fwww....

I get the normal grant/deny access page.

Since my domain ishttp://grabb.itI was wondering what I can do about this?

(To answer your question, I'm using Ruby and am planning to package up my code as a gem/Rails plugin when I'm done.)

yours,