No because it only prints the user creds and only if he has authenticated
On Jan 30, 2014 12:20 PM, "Shay Davidson" <notifications@github.com> wrote:

> In app/controllers/application_controller.rb:
>
> > @@ -6,4 +6,15 @@ def self.admin_only(options = {})
> >      http_basic_authenticate_with({:name => "admin", :password => "1234"}.merge(options))
> >    end
> >
> > +  def callback
> > +    access_token = request.env['omniauth.auth'][:credentials][:token]
> > +    access_secret = request.env['omniauth.auth'][:credentials][:secret]
> > +    options = {
> > +      access_token: access_token,
> > +      access_secret: access_secret
> > +    }
> > +
> > +    #rendering the credentials to the client so an admin could later on add the credentials to the twitter user model
> > +    render text: options
>
> doesn't this make our secret public? also, lets move this to another
> controller (auth?)
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/iic-ninjas/veggies/pull/1/files#r9300605>
> .
>