Loading Profile...
Recent activity
Subscribe to this feed
Nick Floyd replied on July 18, 2008 16:19 to the question "Is OAuth an appropriate authorization tool when there is no end-user authorization, just consumer level?" in OAuth:
We're writing a RESTful API that does just that. We use tokens (that we hand back to the consumer) but only as a session simulator / additional validation tool. We are distributing and consuming our own resources. The OAUTH token patten (Authorization) did not fit our needs - we did not need to consume resources from other parties that the user was connected to, but the Authentication fit perfectly.
My personal opinion is that the implementation is appropriate, however by rolling our own tokenization patten, I do not know what impact that would have on standards. We followed the OAUTH Authentication standard, the only difference is that our consumers request tokens from us and consume our resources.
--Nick
