Monday, February 27, 2017

Task 4 - Key generation


Solution Proposed:-


          When a user first call a command from the cli tool it will directly redirect to the main class and will redirect to the endpoint which handle the basic authentication.With the key that return it will redirect again to the endpoint that handles the OAuth2 authentication and will generate a  OAuth2  key  which give access to the other endpoints afterwords.

Why OAuth2 :-


      When going through the WSO2 API Manager product saw that using OAuth2  protocol as the token generator in the product.

Advantages of OAuth 2 other than OpenID connect:-


 the most important feature of OAuth is the access token which provides a long lasting method of  making additional requests.
 Unlike OpenID, OAuth does not end with authentication but provides an access token to gain access  to
 additional resources provided by the same third-party service. However, since OAuth does not  support discovery,
 it requires pre-selecting and hard-coding the providers you decide to use. A user visiting your site  cannot use
 any identifier, only those pre-selected by you. Also, OAuth does not have a concept of identity so  using it for
 login means either adding a custom parameter (as done by Twitter) or making another API call to get  the currently "logged in" user.


No comments:

Post a Comment