Why twitter requires API key secret and Access Token Secret?

Question

I want to understand the responsibilities/differences of API Secret and Access Token Secret. When I need to secure my APIs, I usually ask users to first register yourself and get the accessToken, and use the same for making API calls.

Also, If you can make me understand what are the problems with my current approach based on single accessToken and why should I prefer to implement API Key, API Key Secret, Access Token, Access Token Secret that would be really helpful.

Thanks!

Answer 1

What you're referring to is probably oAuth 2.0 (use of 1 access token). As to the reason why Twitter has both an AuthToken and AuthTokenSecret, it's because Twitter uses oAuth 1.0a, which, at the very least, is said to be more secure than oAuth 2.0 and completely different.