Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options questions only not deleted user 89308

OAuth is an open standard for authorizing access to data. It is a service that is complementary to, but distinct from, OpenID.

5 votes
1 answer
3k views

Would this work to protect a cookie with an OAuth token?

I'm currently trying to set up an OAuth 2.0 authentication scheme to protect some stateless REST webservices. These services deal with sensitive information, and the OAuth support is a requirement. … Is there a safer way to store an oauth token on the client-side? Or is this acceptable security? What am I missing here? …
lv.'s user avatar
  • 495
33 votes
1 answer
45k views

How to do role-based authorization with OAuth2 / OpenID Connect?

I'm trying to understand how OAuth and OpenIDConnect relate to each other, and how exactly I can use them for authorizaton. … Which, I believe rules out the use of OAuth for authorization? I'm not sure how to accomplish this with OAuth/OpenID connect, or even IF it fits my use case. …
lv.'s user avatar
  • 495