2 ms·
> Unfortunately oauth cannot be compressed into a cheat sheet. What's so hard about a specific authentication flow? You have a user, a client app, a resource
by motorest 2y ago
> Unfortunately oauth cannot be compressed into a cheat sheet.
What's so hard about a specific authentication flow?
You have a user, a client app, a resource service, and an authorization service. You have a sequence of requests that send data back and forth. The end result is a token that client apps can send to a resource service. What bit requires volumes to understand?
Take a minute to check RFC6749. All authorization flows in there require between 2 to 6 pages to fully define. Is this too much info to parse?
https://datatracker.ietf.org/doc/html/rfc6749 https://datatracker.ietf.org/doc/html/rfc6749
- Salgat 2y agoYou casually gloss over the hardest part of oauth (the sequence of requests made and the reason why they exist), which is the part no one remembers.