meteor - meteor.js access oAuth token from accounts-twitter in server-side code

Question

I wanted to write a meteor app, that can post a tweet. Since accounts-twitter goes through all the oAuth process and has all the data needed to make an authorized call to the Twitter API, I thought that's gonna be no problem.

As it turns out, it's a little trickier than that. By default, accounts-twitter only exports the profile with the name of the logged in user. I augmented that to include the oAuth information - but in a stupid way: https://github.com/AVGP/meteor/commit/da29e812437c5e7b929599d8e2f4ff79279bfeb7

I am unhappy with this, because: 1.) It should not be in the "profile", but on the top-level (for which I need to touch the accounts-base/accounts-server.js, I guess. 2.) It should not be accessible on the client side (I guess), because that would allow stealing this info via XSS etc.

Can anybody give me some hint on how to implement that "properly"?

Thanks a lot!

Answer 1

没关系 - 我找到了。

实际上，诀窍不是在服务器端调用 Meteor.user() ，而是这样做：

Meteor.users.findOne(...).services.twitter

这为您提供了所有信息，并且这些信息隐藏在 Meteor.user() 中。