How can I have my app (PHP) get a user token by submitting the username and password? I can only find an example that forwards the user to the eBay site, which is an extra barrier IMO.
I have seen many sites which do this, so I know it's possible!
Code examples would be great! Thanks
Posts:
6,643
Member Since:
7/2/03
Re: Authenticate without redirect
Posted:
Sep 5, 2008 2:41 PM
I'm not sure I understand completely, but this is not a feature that would be generally available. You may want to file a support ticket here http://developer.ebay.com/support/developersupport/ if you have a specific use-case you'd like to discuss.
Best Regards, eBay Developer Support
Posts:
1,431
Member Since:
2/17/07
Re: Authenticate without redirect
Posted:
Sep 6, 2008 7:36 AM
Can you supply an example of a site that you believe is using the eBay API, but does not route the user through the eBay login?
Some sites (e.g. sniping services) manipulate the eBay website on the user's behalf. They are using "scraping" techniques.
Except for details private to buyers or sellers, you can retrieve most data using a token that's based on your own eBay login. eBay provides a tool for this purpose.
--David
Posts:
3
Member Since:
8/30/08
Re: Authenticate without redirect
Posted:
Sep 6, 2008 12:34 PM
My app would bid on items for users. As I understand it, this would require each user to be redirected through ebay's sign in page to obtain a token.
I won't name any individuals, but there are online ebay apps which can bid for items, simply requiring the users ebay username and password. Perhaps they are scraping.
How long is a user token valid for before it expires?
Posts:
1,431
Member Since:
2/17/07
Re: Authenticate without redirect
Posted:
Sep 7, 2008 4:23 AM
Tokens are currently good for 180 days, but they can be revoked at any time from the user's eBay preference page. You get the expiration date with the token and can also check status via the API.
The PlaceOffer call is not available to everyone. You must get special permission from eBay.
Sniping via the API is strictly prohibited. It's a also an API license violation to mix scraping with API calls. It's one or the other.
--David
Posts:
3
Member Since:
8/30/08
Re: Authenticate without redirect
Posted:
Sep 7, 2008 6:25 AM
It's strange how eBay don't allow sniping using the API, when they allow it on their site. They're practically inviting people to scrape.
Also, the 180 day expiration of tokens is harsh. Having all of my users go through the process of renewing ever 180 days is going to cause a right ballache!
Thanks for the help guys!
Posts:
1,431
Member Since:
2/17/07
Re: Authenticate without redirect
Posted:
Sep 8, 2008 8:09 AM
