From the oauth spec: http://oauth.net/core/1.0a
If the
Consumer is unable to receive callbacks or a callback URL has been established via other
means, the parameter value MUST be set to oob (case sensitive),
to indicate an out-of-band configuration.
But if i visit:
http://api.myspace.com/authorize?oauth_token=7VV788COGHCsTCuapSuIkC8pEv%2FINFGzJjFGUQBgZUgTHJCCuPsQ1o0FHaO4A1%2B2RecjDOq8OtYM9m4%2F5b2aidGYhPX3O7Ao4yVKqH1PeeRwbdstcHVq1CuyikiWDHFl&oauth_callback=oob
It authenticates me sucessfully but doens't give me a verfier token. If I then try to verify it without a oauth_verifier param, I get:
oauth_problem=parameter_rejected,oauth_problem_advice=oauth_verifier is invalid or doesn't match
Yahoo, Twitter, and Google all handle oob, plesae support it for non web-based apps.