scala - Securing REST API on Play framework and OAuth2 -


i developing application play 2.0 , scala exposes rest api. these apis used different applications, web, mobile or desktop, oauth protocol (oauth2) seems suitable.

also use external oauth provider such facebook.

my question is: exact flow authorize individual rest call? should expect on server side each call , should check external provider?

with oauth1 knew client sent token signed request, oauth2 think not so, imagine if token not signed not trusted , therefore not think flow.

you use module called securesocial.

https://github.com/jaliss/securesocial/

this 1 quite refined , many people in play community seem aware/using module.

for authorization might useful. https://github.com/schaloner/deadbolt-2/

for end end scala stuff, https://github.com/t2v/play20-auth


Comments

Popular posts from this blog

javascript - backbone.js Collection.add() doesn't `construct` (`initialize`) an object -

php - Get uncommon values from two or more arrays -

Adding duplicate array rows in Php -