Secure REST API Authentication

ushahidi / SwiftRiver

Discover, analyze and present data from the web and mobile in meaninful ways

GNU Affero General Public License v3.0

83 stars 39 forks source link

Secure REST API Authentication #322

Closed ekala closed 11 years ago

ekala commented 11 years ago

Implement secure and reliable API authentication. Some alternatives for this are:

OAuth
A variant of AWS Signature algorithm - http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-authentication/

Though complex, the uptake of OAuth by the developer community has been extremely positive. It is also well documented and therefore is a strong candidate.

Thoughts?

ekala commented 11 years ago

OAuth 2.0 implemented in https://github.com/ushahidi/SwifRiver-API repo

The PHP-OAuth2 library in the SwiftRiver_API module is used for sending requests to the API

Closing.