search

laminas-api-tools / api-tools

Laminas API Tools module for Laminas
https://api-tools.getlaminas.org/documentation
BSD 3-Clause "New" or "Revised" License
37 stars 19 forks source link

How to set API Key and API Secret to clients? #26

Open weierophinney opened 4 years ago

weierophinney commented 4 years ago

I want to use Apigility to create an API that several clients will consume. What I need to do is something like Facebook does: people can create apps that connects to my API, and I can see what apps are connected.

Also I would like to be able to limit services for some apps. Something like app A can online view statuses, App B can view and post and edit statuses, App C can only edit statuses for examples.

Is that possible with apigility? Where can I find documentation for the API Keys and Secret?

In other words I want application based authorization instead of user based authorization that Oauth2 does.

Originally posted by @backstageel at https://github.com/zfcampus/zf-apigility/issues/165

weierophinney commented 4 years ago

I have the same question

Originally posted by @strausmann at https://github.com/zfcampus/zf-apigility/issues/165#issuecomment-228609736

weierophinney commented 4 years ago

There is a client_credentials grant type in OAuth2. If you're asking about scopes I think my api-skeletons/zf-oauth2-doctrine supports them best.

Originally posted by @TomHAnderson at https://github.com/zfcampus/zf-apigility/issues/165#issuecomment-228614599