Goodreads Developers discussion

Hi, I'm writing a simple app in python that uses a user's friends, followers and following lists. All of these have been giving me trouble, I can see the example follower/following xml from the docs fine while in a logged in browser, but not through curl or logged out('not authorized'), and the friends url just returns "not authorized". In the python application they all throw 401 Unauthorized exceptions. All of these are read only, so should be fine to be read without Oauth or logged-in cookies unless the user has set friends to private.

I think for private profiles you need to be oauthed as a friend of the user with the private profile. Is this what you're seeing?

Michael wrote: "I think for private profiles you need to be oauthed as a friend of the user with the private profile. Is this what you're seeing?"

I seem to be seeing "not authorized" even for accounts that aren't private, random example from the frontpage: http://www.goodreads.com/friend/user/... is freely viewable, http://www.goodreads.com/friend/user/... isn't authorized, and followers,following are only viewable logged in.

You're right. I'll get someone to look into this shortly.

Michael wrote: "You're right. I'll get someone to look into this shortly."

Thanks!

Jonathan, sorry about the long wait, but the fix is finally in. It will be live in the next release in a few hours.

edit: I spoke to soon. I need more time to look into this, but I'll try to fix it as soon as I can.

Hi Jonathan, it turned out that the user.friends method requires oauth so you'll need to use oauth to connect to that method instead of a key.

Louise wrote: "Hi Jonathan, it turned out that the user.friends method requires oauth so you'll need to use oauth to connect to that method instead of a key."

Louise, I'm trying to access the /friend/user/ API as well and am having no luck. I'm making a standard OAuth request and the API seems to always return 401 - not authorized.

Here's an example of the header I'm sending:

_header: 'GET /friend/user/2632115.xml?&key={My_Key} HTTP/1.1\r\nAuthorization: OAuth oauth_consumer_key="{Consumer_Key}",oauth_nonce="aZRivbh8BOlaz6NNAuai9gjlNBWelM2F",oauth_signature_method="HMAC-SHA1",oauth_timestamp="1310279503",oauth_token="{my_token}",oauth_version="1.0",oauth_signature="{My_Signature }"\r\nHost: www.goodreads.com\r\nAccept: */*\r\nConnection: close\r\nUser-Agent: Node authentication\r\nContent-length: 0\r\nContent-Type: application/x-www-form-urlencoded\r\n\r\n',

You can see the code I'm using to connect here:
https://github.com/bdickason/booklist...

I'm trying to find ways to debug this but can't seem to see much else that I could do differently. I'm using the standard node-oauth library with only a few parameters and the call fails whether I make it asynchrnously or blocking

I'm having the same issues as noted here: http://www.goodreads.com/topic/show/6...