Re: [OAUTH-WG] Recommendations for OAuth in browsers

2019-12-17 Thread Hans Zandbelt
there's: https://tools.ietf.org/html/draft-parecki-oauth-browser-based-apps that mentions handing OAuth through a backend component in: https://tools.ietf.org/html/draft-parecki-oauth-browser-based-apps-02#section-6.2 There's an implementation of such a backend in a module for the Apache webserver

[OAUTH-WG] Recommendations for OAuth in browsers

2019-12-17 Thread Evert Pot
At our company we're developing REST apis. One of the things that are pretty important to us, is developers being able to access the REST apis directly, via their browsers.Our systems typically have a middleware that converts generated hal+JSON to a HTML interface for easily browsable. When using