Skip to main content

All Questions

Tagged with
Filter by
Sorted by
Tagged with
1 vote
0 answers
85 views

Handling 3rd party OAuth2 tokens

After some extensive research I still don't know how to properly implement the following case. I think this question answers something similar, but I'm not 100% sure (Should client have access to 3rd ...
johannesp's user avatar
  • 111
0 votes
1 answer
3k views

How Immadiately Blacklist and Block Access of Access Token using JWT?

I have read OAuth2 and its statelessness using JWT as token. Token expires based on expired time, then how do I control token like blacklist and block its access immediately without being stateful? ...
Yosua Lijanto Binar's user avatar
1 vote
1 answer
7k views

Architecture for OAuth2 - BackendServer - FrontendServer

I'm developing an whole ecosystem with an OAuth2 Provider, a Backend Server and a Frontend Server. OAuth2 Provider: provide only the authentication/authorization for the user, and a few other general ...
RikyTres's user avatar
8 votes
3 answers
2k views

OAuth alternative for a 2 party system

I'm writing a RESTful service (Java EE, Jersey) and a client application that communicates with it, and I wish to secure it and store any usernames & passwords dedicated in my own database. I do ...
Alon Amir's user avatar
  • 183
4 votes
1 answer
3k views

How to bypass Oauth2 authentication when the client and resource owner is the same entity?

We are currently working on using an API provided by Mercado Libre which is a maket place for selling various goods. Their APIs use OAuth 2.0 for authentication. The problem is that OAuth 2.0 as ...
Songo's user avatar
  • 6,663