SmugMug loves OAuth

SmugMug’s API now supports OAuth! We actually rolled out support a few weeks ago, but our documentation has turned into such a mess, I delayed announcing it. Finally, though, I just couldn’t keep quiet - I’m so excited I just had to tell someone!
So I’m sorry the docs are all messed up - they’re in multiple locations and out of date. We’ve been working hard on re-writing them to make them easier to understand and more clear but we’re not quite done yet. David, though, has a great excuse for why we’re behind - you’re looking at her! His beautiful daughter, Caitlin Ann, was born at roughly the same time as our OAuth support shipped. He’s had his hands full.
So go read the new docs on OAuth, the old docs on the rest of the API, and the dgrin API forum so you can get cracking on your own OAuth services and apps. Hopefully lots of the 1200+ apps our awesome developers have already created will adopt it quickly.
For those who don’t know, OAuth is an open standard for secure authentication. It allows applications and services to authenticate to SmugMug and other OAuth-enabled APIs without needed to know or store the users’ sensitive login and password information. I imagine at some point OAuth might become the *only* way to authenticate to our API, so I’d at least start playing with it now.
Your photos are yours, not ours - long live open standards and data portability!
UPDATE: I should have noted that this is totally useable now, you don’t have to wait for the docs update. It’s just mildly painful to go between a few different locations to find all the documentation. This is on a new Beta API branch, 1.2.2, so you’ll need to use 1.2.2 endpoints.
Tags: API, authentication, data portability, oauth, open standards, smugmug





June 11th, 2008 at 3:48 pm
Hey Don, great news on OAuth support. Any chance you’ll be adding OpenID support?
Cheers, Brian
June 11th, 2008 at 4:04 pm
@Brian Kissel
Yes! If you hop in your time machine and go back to February 23rd, 2007 you can relive when we launched support:
http://blogs.smugmug.com/don/2007/02/23/smugmug-embraces-openid/
http://blogs.smugmug.com/don/2007/02/26/more-smugmug-openid/
http://blogs.smugmug.com/don/2007/02/27/why-openid-at-smugmug/
For good measure, we support XFN, FOAF, RSS, Atom, and all sorts of other portability-friendly things:
http://blogs.smugmug.com/don/2007/09/21/smugmug-supports-xfn-foaf/
And yes, now that OpenID 2.0 is a released spec, you can expect us to support it “soon”.
June 11th, 2008 at 10:17 pm
Don,
As the author of a couple SmugMug API applications (and more to come) I couldn’t agree more — your docs are a mess. I’d argue it’s more than “mildly painful” at times so I’m thrilled to hear you acknowledge it and look forward to seeing the improvements.
Now off to implement OAuth for http://code.google.com/p/pysmug (already 1.2.2 compliant) and friends.
thanks, brian
June 26th, 2008 at 10:07 pm
[...] announced on the blog of CEO Don MacAskill, the photo-sharing site SmugMug now supports OAuth: OAuth is an open standard for secure [...]
June 29th, 2008 at 8:04 pm
[...] CEO Don MacAskill的BLOG上宣称, 图片分享网站 SmugMug 现在开始支持OAuth: OAuth 是一个开放的安全认证标准。它允许应用程序和服务获得SmugMug和其他基于OAuth模式的API的认证,而不需要了解或存储用户敏感的登录和密码信息。我猜想OAuth可能会成为用来认证我们API的唯一途径,因此我们至少现在就需要与其共舞了。 [...]
July 2nd, 2008 at 4:10 pm
[...] adopts OAuth I’m just over three weeks late on giving SmugMug props for rolling out support for OAuth on their [...]