I too am only seeing the callback for uninstall -- however, it seems like my hmac verification is failing (my auth verification works fine with other requests e.g. from makeRequest), i also verified with the oauth tool -- is there anything fishy going on in the signing of the callback request?

I struggled for half the day yesterday getting oauth to work because I'm using php4 and had to write my own.

But eventually, I did get it working for the uninstall callback.

One little problem I had was that if the signature sent contains a "+" sign, $_GET returns it as a space.
So I had to do a preg_replace on the sig to put the + back.

    $signature = $_GET['oauth_signature'];
    $signature = preg_replace('/ /', '+', $signature);
 

Thanks...

This is working for us now as of 11-03-2008 @ 2pm GMT. Both install and unistall are signed.

The install call is still not working for us today. Hopefully this will be fixed before Thursday, but I recommend you don't depend on it.

This appears to be very intermittent. 

Yesterday afternoon, when they said it was fixed, I tested, and it worked most of the time, but once didn't call install.

This morning, I inspected my logs, and it appears someone else actually installed my application, and then removed it, but I only saw the remove call.

I just tested it again, Install callback did not work. Remove worked fine. 

@nkur despite your statements that install and uninstall url callbacks are working as of a month ago, it doesn't seem working fine.

 My install callback url is getting called instead of uninstall callback url at uninstall time causing all oauth confusion.. Never getting a callback to uninstall url but install url callback is working fine.

So why is it that the uninstall operation is calling the install callback url? 

Can you please check and let me know what the status is on this?

This whole thing is rather fishy.  I'm getting the expected response from an uninstall, just like many of the folks here, but I get nothing from the install.

 When I check Firebug for the behind-the-scenes action, I see that this information is posted to my install callback url:

{
"token":"d9aLQzuVPJfMsBwFXNdOi400YC5nGRf...BppKow%3d",
"permissions":["displayonprofile","displayonhome","allowsendingemails","sendupdatestofriends"]
}

 Where's the owner's id?  In the token?  Do I just base64 decode that token?

@MDP guys: any news?

Install and Uninstall callbacks work for me but I have been unable to get the hmac validation to work.  I'm using oauth in ruby on rails.  Has anybody else been successful getting this to work in ruby?  Note that I'm using the same oauth library for accessing the REST APIs and it works like a charm.  My guess is that myspace is using only some of the parameters when generating the hash.

Thanks! 

Let me check into this. :)

Rhonda

Is this still an issue?

Please check in... 

Also, provide me with info for qa to reproduce.

Rhonda

Hi

I am new to MySpace and am creating an application. I wanted to know what url shall I  give for Install Callback Url and UninstallCallback URL.

Is it the url for the applications profile? please do let me know.

Waiting for a quick reply.Thanks in Advance.

Regards

Siddhartha