api - What OAuth pattern/flow is this called? -
api - What OAuth pattern/flow is this called? -
i'm attempting utilize oauth 2 in order create protected api. except, want of users on site require access token
in order them access api.
the reason beingness api exposed public, don't want public access api. application makes number of calls api via ajax requests.
anyway, example, in application if user clicks on users profile, create ajax request to:
example.com/api/user/id
and homecoming json
info user.
but, want them protected access token
required - registered users - view them.
soundcloud doing i'm attempting achieve. every user authenticated oauth token.
1. login soundcloud 2. issue oauth token logged in user 3. utilize token create api requests
i'm sure number of sites doing this, can't find specific tutorial on putting type of model
assume it's popular model implemented on number of sites.
what pattern called?
it sounds referring "client-side javascript applications" in soundcloud api document. if so, flow "implicit flow". see "1.3.2. implicit" , "4.2. implicit grant" in rfc 6749 (oauth 2.0).
api oauth oauth-2.0
Comments
Post a Comment