As far as I know, to authenticate with Twitter using Cognito you have to use the OAuth API. I have never done this.

I generally have a philosophical objection to OAuth. I feel that the subtitle for OAuth should be: “OAuth: get hacked once, get hacked everywhere”.

The closest that I’ve gotten to something like OAuth is a feature in nderground.net that allows users to invite people from their Google contacts.