search

eclipse-thingweb / node-wot

A fast and extensible framework to connect any device with your browser and backend applications
https://thingweb.io
Other
165 stars 79 forks source link

Clarifying bearer security scheme #310

Open erceguder opened 4 years ago

erceguder commented 4 years ago

I've been trying to understand how bearer auth. -independent of oauth- works and can be implemented. Unfortunately, I could neither find a broad explanation (had a look at the TD documentation) nor a concrete example; leaving me with question marks on my mind. It would be great if somebody could supply a sample thing and consumer pair so as to show the implementation details and how things work.

Thanks in advance.

erceguder commented 4 years ago

According to this line, token property of credentials is checked for equality with the token sent. Furthermore, I've observed that I can set token property any string, and it works as long as it matches with the request's! On this point, what are the uses of format, whose default value is jwt, and authorization parameters?