Linked Questions
11 questions linked to/from OAuth 2.0: Benefits and use cases — why?
677 votes
10 answers
298k views
How is OAuth 2 different from OAuth 1?
Can someone explain the difference between OAuth 2 and OAuth 1? Is OAuth 1 obsolete now? Should we be implementing OAuth 2? I don't see many implementations of OAuth 2; most are still using OAuth 1, ...
17 votes
3 answers
29k views
OAuth 2.0 two-legged authentication vs SSL/TLS
I have two enterprise servers which need to communicate in a secure way, and am comparing using SSL (with client/server certs to validate both sides) vs two-legged authentication using OAuth 2.0 (...
12 votes
1 answer
20k views
Securing a REST API written in PHP with OAuth2 client credentials flow
I am writing a REST API in PHP using Symfony2. This API is intended to be used by individual websites to access data and this will be done by a client side library. I need to secure the API however ...
1 vote
1 answer
1k views
Use cases of OAuth2.0
I am building a muli-tenant saas(software as a service) architecture. I have to build the authentication system for the system. From what I have studied, I think I need to the build the ...
0 votes
3 answers
2k views
How to understand when oauth is being used
I am trying to understand in what scenarios I should be using oauth. From reading the spec, I understand that you are essentially delegating identification to a 3rd party. So if we take the example ...
0 votes
1 answer
1k views
Android apps persistent authentication
I have recently started toying with an android application, and I have gotten to the point where I want it to communicate with a web service, I understand completely how to do this in an insecure way, ...
-1 votes
1 answer
783 views
authenticate url in java and allow the browser to open secured page
where i will populate a table which has links and each link is pointing to different case id, when click on that link, i need to validate that 3rd party url in my java method and need to allow the ...
2 votes
1 answer
298 views
Confused about OAuth
Call me a newbie, call me dumb, rate down this topic. Do as you like, I'm just here to ask a question and hopefully learn something from it. So I've been making an API for my website today (well ...
0 votes
2 answers
291 views
ASP.NET Rest Service - persisting Token
We have been using SOAP services up until this point and we're creating some new services and using REST. We were using a basic user{Guid}/developer key {Guid} authentication in our SOAP headers. So ...
0 votes
1 answer
110 views
Importance of using o auth with nodemailer
Actually I'm a beginner in node.js so please do excuse me if my question is foolish. Basically I'm sending email by using my gmail account via node-mailer . But now I want to know is it necessary to ...
0 votes
1 answer
64 views
Centralized management server for many systems
We intend to create a REST API that will be implemented on 100+ servers for use by a Centralized Management Portal (CMP). This CMP will itself have full access to the API (for scheduled tasks etc.) ...