staff:
Developers: OAuth support
For increased security and more resilient third-party apps, we’ve started early testing of OAuth support in the Tumblr API.
We’ve modeled our implementation after Twitter’s in many ways, supporting OAuth 1.0a with optional xAuth, upon request, where it makes sense such as mobile and native applications.
The existing authentication methods in the API are still supported for now, but we encourage developers to migrate to OAuth when possible.
To get started with Tumblr’s OAuth, integrate an OAuth consumer library into your project and get a consumer key by registering your app.
This is still in its early testing stages, so please report any issues. Thanks.
I’ve not written any software that implements OAuth yet so I’ll definitely give this one a whirl with some of my own Tumblr apps soon. This sure beats the current method for an authenticated read using POST requests with custom headers on an insecure connection passing along fellow user’s login details in plain text (I was surprised that you guys never implemented TLS/SSL).
It’s also great to see OAuth libraries available for so many platforms and APIs. Hell, there’s even an OAuth library for the .NET Compact Framework. Not that anyone actually cares about Windows Mobile but still, choice is indeed nice.
Next thing on your list of things to sort out in the API is replies! Seriously, they’re one of the most used features on Tumblr and devs can’t even implement them. Second on your list is Message/Ask; another highly popular feature that even the iPhone optimised page doesn’t feature. Finally, for the complete package, allow direct video uploads to Tumblr as opposed to using embed or data (that just uploads to Vimeo anyway).