a game score web service

concept.txt

- The web service provides a highscore system (keep <N> top scores, where N depending of the account plan)
- It can be easily embedded in a web page with widgets (JS). There is a clean API to send scores.
- Different ways to send scores : Usage of social network (Twitter), direct send with REST
- One account have N different scores where N depending of the account plan
- Some simple analytics

Ways to send scores :
- Connecting with social network like Twitter : exemple: "http://grenlibre.fr/same - My highscores on Same Game: easy: 12, normal: 23, hard: 45. @samegamegravity $a45c2" :
  * a twitter account with an app configured - the WS will retrieve mentions
  * We can easily retrieve usernames and avatars
  * multiple scores in one send -> each is bound on a key for a game
- Direct sent with a POST

- Widget to embed top highscores of a game
- Widget to display best score of a user by his name

- The hard part of that kind of web service is the security. You always can fake a score even with some security hash (like in my example). But we can make it hard.
  * Validated by the Admin : An admin part let the manager remove fake scores
  * Provide a way to code the security validator (for exemple in Javascript) for each twitt to validate (exemple: the hash is the md5 of the twitt concatenate with private key)
  * Twitter usage is a deterrent of faking scores.