Task 4 - Key generation
Solution Proposed:-
When a user first call a command from the cli tool it will directly redirect to the main class and will redirect to the endpoint which handle the basic authentication.With the key that return it will redirect again to the endpoint that handles the OAuth2 authentication and will generate a OAuth2 key which give access to the other endpoints afterwords.
Why OAuth2 :-
When going through the WSO2 API Manager product saw that using OAuth2 protocol as the token generator in the product.
Advantages of OAuth 2 other than OpenID connect:-
the most important feature of OAuth is the access token which provides a long lasting method of making additional requests.
Unlike OpenID, OAuth does not end with authentication but provides an access token to gain access to
additional resources provided by the same third-party service. However, since OAuth does not support discovery,
it requires pre-selecting and hard-coding the providers you decide to use. A user visiting your site cannot use
any identifier, only those pre-selected by you. Also, OAuth does not have a concept of identity so using it for
login means either adding a custom parameter (as done by Twitter) or making another API call to get the currently "logged in" user.

No comments:
Post a Comment