Hi, the OpenSocial specification says, that it should be possible to communicate to an external API via OAuth including the user authentication process. We want the user to authenticate on an other website and grant us permissions, so we can use his profile data of this other website on the MySpace widget. We can't change the API and need to sign the OAuth request with the given consumer key / secret. Since the secret can't be hidden in the javascript code, we need MySpace to sign the request, right? Has MySpace implemented the OAuth Proxy and makes this possible yet? If not, when will it be possible?

 MySPaceID or local app?

I want to make an OAuth request from within a MySpace widget to our API. The widget would ask the user to identify on the external site. The user gets redirected to the external site, identifies and allows the MySpace widget to access his data on this site. He then gets redirected to the MySpace widgets page where he can see a personalized widget displaying his data from the external site.