I would like to know how the official Twitter Mobile Application (android/IOS) is able to connect a user without approving the application ?
Do they use their own REST API with OAuth but wich one ?
https://dev.twitter.com/docs/auth/obtaining-access-tokens
Do they use a special master key ?
Isn’t it a security threat ?
They appear to use OAuth interface just like any other app. If you go to the twitter settings page, where you can revoke OAuth tokens, I see the mobile twitter applications there (iPhone, iPad, IOS integration) and they can be revoked.