[cap-talk] Opinions of oauth?

[Karp, Alan H]

shap wrote:


è I'm thinking about a cloud application that synchronizes content on multiple platforms across multiple users. Need some mechanism for users to authenticate, and also to delegate access.

OAuth 2 is for you.  There's even an expired IETF draft on recursive delegation, http://tools.ietf.org/html/draft-vrancken-oauth-redelegation-01. As described the protocol implements VOC, but you can modify the protocol to use bearer tokens, instead.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
http://www.hpl.hp.com/personal/Alan_Karp
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.eros-os.org/pipermail/cap-talk/attachments/20120103/0f34c587/attachment-0001.html