Geni API with php

Did you register your app at http://www.geni.com/apps instead of using our demo key? We've removed the demo key from our system.

See http://www.geni.com/discussions/89484 for more info about why we've removed the demo key.

I sure did!

Application Name: oneGeni
Main Application URL: http://geni.onereason.eu
Callback URL: http://geni.onereason.eu/callback

[[54] - The link http://geni.onereason.eu - tellls me that we need a deny button as well,- try clicking and then try to get out of it without approving.

It hijacked my browser (chrome 11.0.696.44 beta), - clicking Homeand so on redirects to the Approve link again.

Funny! We maybe shouldn't show a full header there, either. I'll bring it up with the team.

We've modified the authorization screen to allow you to click out.

I still can't get out, - a usual action when you get such a request is to click on the product name to see what it is.

You should add a Deny button.

What would the Deny button do?

Bjørn I had the same problem after the fix was released. I had to log out of Geni and delete my *.geni.com cookies to make the old redirect go away. I'm now able to click on the Geni logo to navigate to the home page, from that authorization screen.

For the specific http://geni.onereason.eu situation the "error" is at their side, - always redirecting to the approve page, but I assume that it is because it is just a test.

When it comes to Deny I am sure that the OAuth2 protocol defines what to send when you click it.

If following the protocol Approving should lead you to this page: http://i632.photobucket.com/albums/uu41/bpbrox/AllowedRequest.png and Geni should have a similar page if you deny.

What I am missing on that page is a list over approved apps with a button for stopping their access leading to this page:

http://i632.photobucket.com/albums/uu41/bpbrox/API_Disconnected.png

Both are real snapshots from Geni, - it is just the road to them that is some unclear.

We agree that we need a list of approved apps with a way to revoke authorization -- we're already working on it.

Thanks, - BTW: Are Geni doing any security-check on apps they give access to Geni? I did a network monitor on one of the desktop apps and I notice that it was communicating with more sites than Geni when active, so I blocked it.
We also had a lot of spamming on Geni where the spammers obviously had access to the languages-election of the victims, and the only method to find it is using the API.

Geni makes no expressed or implied guarantees as to the security or suitability of third-party applications.