scala - Securing REST API on Play framework and OAuth2 -
i developing application play 2.0 , scala exposes rest api. these apis used different applications, web, mobile or desktop, oauth protocol (oauth2) seems suitable.
also use external oauth provider such facebook.
my question is: exact flow authorize individual rest call? should expect on server side each call , should check external provider?
with oauth1 knew client sent token signed request, oauth2 think not so, imagine if token not signed not trusted , therefore not think flow.
you use module called securesocial.
https://github.com/jaliss/securesocial/
this 1 quite refined , many people in play community seem aware/using module.
for authorization might useful. https://github.com/schaloner/deadbolt-2/
for end end scala stuff, https://github.com/t2v/play20-auth
Comments
Post a Comment