Anonymous Users In An OpenSocial Container
mmarum-sugarcrm opened this issue · 0 comments
Original author: rbaxte...@gmail.com (May 09, 2012 00:00:14)
The social specs (data, server, gadget) does not have enough definition around how the social APIs should work when the user is not authenticated with the container. The only mention of this scenario is in section 2.1.1.1 of the Social Server API Spec.
"If the User-Id is set to -1, the value for the anonymous user MUST be returned. The value for the name and nickname fields can either be blank or set to an appropriate value such as 'Guest', 'Anonymous', etc."
The spec is ambiguous around other social API use cases.
What happens is a gadget call osapi.people.getViewer? Is the object returned a person with an id of -1? It is also not clear what the name should be, is it Anonymous, Guest, something else? Also what part of the name object should be filled out?
What happens if I call the some of the other social APIs?
https://groups.google.com/forum/?fromgroups#!topic/opensocial-and-gadgets-spec/_j8waMcrteg
Original issue: http://code.google.com/p/opensocial-resources/issues/detail?id=1310