How would an efficient OAuth2.0 server / provider work?

后端 未结 3 673
Happy的楠姐
Happy的楠姐 2020-12-03 06:02

I may need to implement an OAuth2.0 server for an API I\'m creating. This API would allow 3rd parties to perform actions on the user\'s behalf.

OAuth2.0 has 3 mains

3条回答
  •  臣服心动
    2020-12-03 06:47

    Actually most of implementations are using bearer token over https not mac in OAuth 2.0, check this presentation pages 54-56 about why prefer bearer ,on other hand spring implementation is not supporting MAC token for OAuth 2.0 and there is an open issue about it but it is still open

    for time-being if you are looking for spring implementation demo you can check this source code but it is using data base to store tokens, and there is connection have to be done between the resource server and Authorization server, in this demo using data base.

    one of open source implementation of Spring OAuth 2.0 is UAA of cloudfoundry I attend one session about it also they were telling that there is communication have to be done between both servers. link

提交回复
热议问题