Rest API with External OAuth

Question

I am attempting to build a RESTful Web API for my application. I want to know how I can use OAuth to authenticate clients. These clients will be Single Page Applications (SPAs) or thick clients. Below is how I'd like the user experience to be:

Users access a web-application
The landing page provides a button to login via (Facebook, Yammer, etc)
The user logs in with the external OAuth provider
The OAuth provider redirects him to the return URL
The page loads and makes API calls to my web API

So couple of questions:

What mechanisms do I use to register different clients?
How does the SPA web application hold onto the access token issued by the OAuth provider?
How does my web API use the access token provided to the SPA web application and identify the user's details?

P.S. I am planning to use Node.js and express with Mongoose to build the Web API.

Community · Accepted Answer · 2017-05-23 10:32:13Z

1

You can use Passport to get users to authorize a service (Facebook, Twitter etc) so that your web app can access their user profile.

This answer has more information on where to store the OAuth token.

edited May 23, 2017 at 10:32

CommunityBot

11 silver badge

answered Nov 3, 2013 at 0:54

Bulkan

2,5921 gold badge22 silver badges32 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Rest API with External OAuth

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related