reddit/reddit — Issue #238: API login status ignored for listing with jsonp parameter set
Author: cr125rider
Created: 2011-10-22 18:39:06+00:00
State: open

When getting a list data from the Reddit API by going to:

http://www.reddit.com/.json

The data returns with the stories according to the currently signed in user. I see some specific posts that I would not see if I were not logged in. This looks just like http:///www.reddit.com if I were to go there and see the data in the view.

If I append the jsonp=? paramerter, it just returns data as if I were not signed in, for example:

http://www.reddit.com/.json&jsonp=C

The data is wrapped properly, cookies are sent along with the request, just the data returned does not obey the currently signed in user settings.

Is this a bug, or expected functionality for cross domain security?

Thanks,
-Seth