---
tags: [talks, oauth, integration, social networks]
---
Wednesday, November 24, 2010 at 10:36:31

Yesterday I gave a talk at [devclub](http://devclub.eu/) with a broad overview of social network APIs, and as usual, not everything I wanted to say made it into the talk. In particular, topics around [privacy and the future](http://kurapov.name/rus/lab/opensocial_networks/), and one question from the audience.

authentication = identity verification (of a user), from authentic = genuine, real
authorization = permission (to perform actions)

OAuth is about authorization (granting an app permission via a token), not about requested privileges themselves or subsequent API actions. Authentication should be handled by the social network itself.

<iframe title="vimeo-player" src="https://player.vimeo.com/video/17136348?h=0b6ff5aa77" width="100%" height="400" frameborder="0"    allowfullscreen></iframe>