I’ve created a web widget that displays user specific information from my site. This widget is java script based (I followed this example), and can be embedded in other sites.
I’m looking for a way to control who can embed the widget in his site. Any ideas/references are welcome.
You have to use some additional tricks along with OAuth in order to positively identify the client.
This question was answered in details in here.