php - Is OAuth viable for my website's API? -


i'm developing social networking website. service available across various mediums, example: web, iphone, facebook application etc.

my idea application have of these properties interact 1 central point fetching , saving data: api. various applications interact api, sending get request fetch data; post request submit data; delete requests , on.

this api web-accessible, need way authenticate white-listed applications. api never available third parties interact or build third-party applications with; it's facilitate applications can cut out re-coding solutions across various platforms , focus on logic (controllers, essentially).

therefore, oauth suitable used authentication method above scenario?

my knowledge of oauth isn't great, if deemed viable solution i'll read on before implementing. far know works on tokens. consumer (for example, website) request token application (the api in instance) , application return token use in subsequent requests. or something.

when request comes in application, able accept/deny requests based on requesting application? i.e. can deny access applications aren't own? how differentiate between applications? retain whitelist of ip address or urls, , compare upon incoming requests?

any on above appreciated.

oauth not designed authenticate applications way want to.

juste create own private way authenticate, because you're 1 know api. dont forget pipe authentication in ssl , ok !


Comments

Popular posts from this blog

android - Spacing between the stars of a rating bar? -

html - Instapaper-like algorithm -

c# - How to execute a particular part of code asynchronously in a class -