sugree/twitter-android-sdk

A library to integrate Twitter into your Android mobile application.

twitter-android-sdk's Issues

What is the license for this project?

I could not find any licensing information here.

WebView should not store Twitter credentials and cookies

When the WebView is opened to ask the user to authorize the OAuth connection between the app and Twitter, a CookieSyncManager is used to persist the login session from that WebView. As a result, even after destroying the OAuth tokens (as part of a logout action), the user remains logged in to Twitter and can re-authorize the application without the need to enter his password again. This defeats the purpose of a logout button and also the idea of OAuth applications not storing login credentials.

The WebView should not store any cookies or passwords on the device.

I assume (will test more later), that just removing the CookieSyncManager will fix this problem.

The WebView also asks if the user wants to remember the password. If possible, this should also be suppressed.

question about the scope of the project

Hi there, what should be in the scope of this project?

Some UI components (like the login dialog we already have), I guess.

DAO classes to store twitter data (messages mostly) in the local SQLite database?

Also, should it build on top of twitter4j (to reduce code duplication for the API access itself)? They have an android-compatible jar, and it works well (see here: thiloplanz@2117ae6 )