Author: @jsms90

Maintainer: @jsms90

OAuth workshop

This full workshop has been built from the steps outlined in FAC9's gitbook.

In this workshop we will be using the OAuth 2 protocol to authorise a user logging in to our app. This method of authorisation uses a 3rd party API (in this case, Github). In this guide, you will complete #1-#6 of the OAuth flow diagram from this morning.

The full OAuth guide for Github can be found here and you may find this article, OAuth 2 simplified article, quite helpful.

Do NOT copy and paste anything from your previous workshops or projects. You may look at these to remind you of syntax, but make sure you are writing each and every line yourself. :grin: This will help you to remember all of the server methods, and make you think about what each one is really doing. It also stops you from copying in code with typos or pieces that aren't relevant to this workshop :yum:

Pair up and swap driver/navigator at each step.

Walkthrough

• Step 1 - Set up a basic hapi server & serve 'Hello World'
• Step 2 - Set up your SSL certificates
• Step 3 - Register your app
• Step 4 - Create your login route
• Step 5 - Create your redirect route
• Step 6 - Session management (storing your access token)
• Step 7 - Use your access token