Clarify Guidance on OAuth Service at WoG Level

apigovau / national-api-design-standards

Australian National API Design Standards

35 stars 15 forks source link

Clarify Guidance on OAuth Service at WoG Level #30

Open adraffin opened 4 years ago

adraffin commented 4 years ago

"The API Team provides an OAuth service that can be used by WoG APIs. Alternatively, API Providers can link into Open ID Providers to delegate authorisation. This process can be facilitated by the WoG API Gateway."

The 'API Team' does not provide an OAuth service, it is suggested that reference be made to the TDIF instead. Related issues #28 and #29.

ghost commented 3 years ago

TDIF does not provide OAuth authorisation capabilities it is OPENID connect for user Authentication only