3 ms·
I took that to mean use both identity management as well as OAuth.
by artmageddon 11y ago
I took that to mean use both identity management as well as OAuth.
- balls187 11y ago1. Why use OAuth unless you want to grant 3rd parties access to your services data, on behalf of your customers? 2. Security best practices subject to "open for interpretation."
- superuser2 11y agoWhile OAuth isn't "for" authentication, everyone uses it that way by "authorizing" access to "view your email address" which is as good as authenticating your email address.
- balls187 11y agoCan you link to implementations that use OAuth in such a manner? Login with FB, Google, Github, Twitter, etc different systems, separate from OAuth.
- cpitman 11y agoGitHub How To: https://developer.github.com/guides/basics-of-authentication/ https://developer.github.com/guides/basics-of-authentication... And the OpenID Connect standard (essentially OAuth V2 + identity service): http://openid.net/connect/ http://openid.net/connect/
- hello_there 11y ago> Why use OAuth unless you want to grant 3rd parties access to your services data, on behalf of your customers? So, what would you use instead?
- avinassh 11y ago> Why use OAuth unless you want to grant 3rd parties access to your services data, on behalf of your customers? Can you explain me this? How Google will be able to access my service data?