4 ms·
We care a lot about the simplicity of our API. oauth adds too much complexity and does not fit well our use case (we don't need authentication).
by jlemoine 13y ago
We care a lot about the simplicity of our API. oauth adds too much complexity and does not fit well our use case (we don't need authentication).
- dmak 13y agoYou don't need to authenticate. You can use OAuth for just authorization: http://tools.ietf.org/html/rfc6749#section-1.3.2 http://tools.ietf.org/html/rfc6749#section-1.3.2
- jlemoine 13y agoBut this would reduce the ease of use of the API, increase the latency because of round-trip and will not provide a better security. The fit is not very good. oauth is a good standard when used for the correct use case, which is not the case for this. Sometime a simple solution is better than a framework