Have been going in circles on the docs here. Just a small push in the right direction would be much appreciated.
I'd like to make a flash-app, hosted on Myspace.
I have a server that is going to store some data (levels, experience etc.). So the flash app needs to make calls to my server. These calls will have a GET var with the user ID.
Now, how does the server make sure that the user_ID is actually playing the game? Anybody can just alter the user_id in the server request. Is MySpaceID suitable for this? Should I just use oAuth?
Other API's I've used have been specifically for games (Kongregate) they give a user a token that is unique for that game. So USER_ID X authenticates with TOKEN y.