Linked Questions

677 votes
10 answers
298k views

Can someone explain the difference between OAuth 2 and OAuth 1? Is OAuth 1 obsolete now? Should we be implementing OAuth 2? I don't see many implementations of OAuth 2; most are still using OAuth 1, ...
sullivan's user avatar
  • 6,823
17 votes
3 answers
29k views

I have two enterprise servers which need to communicate in a secure way, and am comparing using SSL (with client/server certs to validate both sides) vs two-legged authentication using OAuth 2.0 (...
Locksleyu's user avatar
  • 5,463
12 votes
1 answer
20k views

I am writing a REST API in PHP using Symfony2. This API is intended to be used by individual websites to access data and this will be done by a client side library. I need to secure the API however ...
user avatar
1 vote
1 answer
1k views

I am building a muli-tenant saas(software as a service) architecture. I have to build the authentication system for the system. From what I have studied, I think I need to the build the ...
Robins Gupta's user avatar
  • 3,153
0 votes
3 answers
2k views

I am trying to understand in what scenarios I should be using oauth. From reading the spec, I understand that you are essentially delegating identification to a 3rd party. So if we take the example ...
Ryan-Neal Mes's user avatar
0 votes
1 answer
1k views

I have recently started toying with an android application, and I have gotten to the point where I want it to communicate with a web service, I understand completely how to do this in an insecure way, ...
Krum110487's user avatar
-1 votes
1 answer
783 views

where i will populate a table which has links and each link is pointing to different case id, when click on that link, i need to validate that 3rd party url in my java method and need to allow the ...
rangoon's user avatar
  • 21
2 votes
1 answer
298 views

Call me a newbie, call me dumb, rate down this topic. Do as you like, I'm just here to ask a question and hopefully learn something from it. So I've been making an API for my website today (well ...
Frank's user avatar
  • 1,874
0 votes
2 answers
291 views

We have been using SOAP services up until this point and we're creating some new services and using REST. We were using a basic user{Guid}/developer key {Guid} authentication in our SOAP headers. So ...
Larry Grady's user avatar
0 votes
1 answer
110 views

Actually I'm a beginner in node.js so please do excuse me if my question is foolish. Basically I'm sending email by using my gmail account via node-mailer . But now I want to know is it necessary to ...
Srinivas Nahak's user avatar
0 votes
1 answer
64 views

We intend to create a REST API that will be implemented on 100+ servers for use by a Centralized Management Portal (CMP). This CMP will itself have full access to the API (for scheduled tasks etc.) ...
Matthew Knill's user avatar