xAuth is still OAuth. You still need to master how to send signed requests to Twitter. The xAuth process will only yield read-only or read-write access tokens. Direct message read access is not provided with xAuth. If your application requires access to a user's direct messages, you will need to use the full OAuth flow. xAuth provides a way for desktop and mobile applications to exchange a usernam