Comments (5)
I think you're asking for support for the OAuth2 Client Credentials grant? See http://oauth2.thephpleague.com/authorization-server/client-credentials-grant/. Please confirm, to ensure I'm not misinterpreting.
from reservoir.
Yes, but I'm about to use JWT tokens without OAuth server that is simpler. User logins with username/password, server generates token based on JSON Web Token rules and returns back to the frontend. And then frontend sends all API requests with Authorization: Bearer ${TOKEN}
header. From my point of view its almost the same as JWT is just a standard for generating tokens, but using it standalone just remove a bit of complexity from the simple application.
Here is a module which already provides JWT token generation for logged in user https://drupal.org/project/jwt
from reservoir.
Thanks for clarifying!
Paging @e0ipso (https://www.drupal.org/project/simple_oauth maintainer) and @gabesullice (https://www.drupal.org/project/jwt maintainer), to get their thoughts.
from reservoir.
From our discussion at DrupalCon we agreed that: if you want to generate your access tokens outside of Drupal, you want JWT. If your ID management service is Drupal, you want Simple OAuth 2.x (which comes with customizable JWTs).
from reservoir.
I don't know what was the motivation for such decision, I suppose for the full-featured solutions (distributions) it's reasonable, but IMHO, for small projects it could be overkill.
You can find the comparison and argumentations for both these approaches in this thread (the talk about the Laravel packages but the idea is the same).
PS: I undestand that the most likely, this won't be part of this distribution, because it focuses on universal solution. So, maybe this thread could be closed if there would be no new thoughts.
from reservoir.
Related Issues (20)
- Cannot install Reservoir sites using config management best practices HOT 7
- jsonapi 404 spits out HTML HOT 1
- Delete 'Content model' Article breaks openapi/jsonapi HOT 2
- Demo content types + content should be optional during the installation process HOT 3
- CORS configuration has no effect when using default services.yml HOT 2
- webflo/drupal-core-strict creates dependency conflicts
- Protect the /admin/api/advanced route HOT 2
- Add support for GraphQL HOT 15
- Refreshing an access token
- Can't install reservoir due to drupal-core-strict HOT 1
- Lightning combined with Reservoir HOT 2
- Composer install crashes on Install -- "Killed" before completing build HOT 2
- Integrate Reservoir with search HOT 1
- Reservoir doesn't install since drupal-scaffold 2.4.0 HOT 1
- Getting 500 error on hitting the api for taxonomy terms HOT 2
- Scale images on advanced API form
- Drupal's Security Model HOT 2
- composer create-project acquia/reservoir-project reservoir-project --stability=alpha failed HOT 2
- Challenging some CMS restrictions
- Are install steps correct? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from reservoir.