3 ms·
You don't need to authenticate. You can use OAuth for just authorization: http://tools.ietf.org/html/rfc6749#section-1.3.2 http://tools.ietf.org/html/rfc6749#se
by dmak 13y ago
You don't need to authenticate. You can use OAuth for just authorization: http://tools.ietf.org/html/rfc6749#section-1.3.2 http://tools.ietf.org/html/rfc6749#section-1.3.2
- jlemoine 13y agoBut this would reduce the ease of use of the API, increase the latency because of round-trip and will not provide a better security. The fit is not very good. oauth is a good standard when used for the correct use case, which is not the case for this. Sometime a simple solution is better than a framework