在 OAuth 下添加辅助身份验证?
问候!
假设我有一组移动设备,它们是三足 OAuth 中的消费者。用户对每个设备进行授权,然后将其交给其他人。我希望这些人需要额外的密码才能与移动设备的受保护资源进行交互。
有没有标准的、最佳实践的方法来做到这一点?我可以使用另一个分层的 2 足 OAuth,还是应该做其他事情?
- 编辑 -
PS 自从我发布这篇文章以来,我发现了 Twitter 的“4 条腿 OAuth”,例如 TwitPic,使用“委托人”,这是回答我的问题的一步,因为原则上 OAuth 似乎可以是 n 条腿。
是否还有其他 4 足和/或 n 足 OAuth 实现可供我阅读?
再次感谢,
Greetings!
Say I have fleet of mobile devices that are the consumers in a three-legged OAuth. The user authorizes each device, but then hands them over to other people. I would like to have these people then need an additional password to interact with the mobile device's protected resources.
Is there a standard, best practices way to do this? Could I use another, layered 2-legged OAuth, or should I do something else?
--Edit--
P.S. Since I posted this I discovered Twitter's "4-legged OAuth" for things like TwitPic, using a "delegator" this is a step towards answering my question, as it appears that OAuth can, in principle, be n-legged.
Are there other 4-legged and/or n-legged OAuth implementations floating around I can read over?
Thanks again,
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论