3 ms·
Isn’t it necessary for oauth?
by heyoni 3y ago
Isn’t it necessary for oauth?
- vlovich123 3y agoIt might be easier to integrate but you’ve got a custom server and client in this case so it should be possible to do both without HTTP being involved for the server/client layer without an HTTP server? At least I think that’s right but it’s been a long long while since I wrote OAUTH code. Seems like it’s primarily to implement the masking feature to pretend to be a normal HTTP server hosted on a port until the shared secret URL is knocked.
- the8472 3y agoThe client and server need to talk http to the authorization server, that doesn't mean they need to talk http to each other.