meteor/meteor — pull request #2016 by timhaines (2014-04-04 22:36:51+00:00)
Title: OAuth 1 - Move pending request credentials from RAM to mongo.

_pendingRequestTokens are request tokens that have been received
but not yet fully authorized (processed).

During the oauth1 authorization process, the Meteor App opens
a pop-up, requests a request token from the oauth1 service, and
redirects the browser to the oauth1 service for the user
to grant authorization. The user is then returned to the
Meteor Apps' callback url and the request token is verified.

When Meteor Apps run on multiple servers, it's possible that
2 different servers may be used to generate the request token
and to verify it in the callback once the user has authorized.

For this reason, the _pendingRequestTokens are stored in the database
so they can be shared across Meteor App servers.