Re: [nodejs] Best practices for token-based authentication in REST API

2013-05-03 Thread Luke Arduini
What happens when authy goes down? Your users just don't log in? On Friday, May 3, 2013, Nik Martin wrote: > I deleted this and reposted, because I forgot to address one of your > questions, which I did in this edit: > > I'm going to vastly over simplify this, but it holds up if you have any > HT

Re: [nodejs] Best practices for token-based authentication in REST API

2013-05-01 Thread José F . Romaniello
what most people do is to open a webview for authentication, you can use oauth or any authentication mechanism, after finishing the oauth flow you get a token into your android app If you need to access an api from the same Identity Provider, you might just get the access token into the android ap

Re: [nodejs] Best practices for token-based authentication in REST API

2013-05-01 Thread Martin Wawrusch
https://github.com/jaredhanson/oauth2orize and check out passport.js On Wed, May 1, 2013 at 2:40 PM, Matthew Page wrote: > Have a look at: > > https://github.com/bnoguchi/everyauth > or > https://github.com/ciaranj/node-oauth > > > On Wed, May 1, 2013 at 2:29 PM, Dick Hardt wrote: > >> Using

Re: [nodejs] Best practices for token-based authentication in REST API

2013-05-01 Thread Matthew Page
Have a look at: https://github.com/bnoguchi/everyauth or https://github.com/ciaranj/node-oauth On Wed, May 1, 2013 at 2:29 PM, Dick Hardt wrote: > Using OAuth 2.0 does not imply that you are using Google or other 3rd > party provider. > > The flow you described is what OAuth 2.0 does. OAuth 2.

Re: [nodejs] Best practices for token-based authentication in REST API

2013-05-01 Thread Dick Hardt
Using OAuth 2.0 does not imply that you are using Google or other 3rd party provider. The flow you described is what OAuth 2.0 does. OAuth 2.0 is commonly used by a mobile app to obtain an access token that is then used for subsequent API calls by the mobile app. Sorry the RFC does not make that a