javascript - OAuth2 NodeJS using oauth2orizerecipes -
i using https://github.com/frankhassanabad/oauth2orizerecipes make authentication server cordova movile app.
i have read past few days lot oauth2, , went lot of times through frank hassanabad has done there, , tried establish workflow application.
but, alas, giving , asking guys because seems stuck.
my main idea want each client (app downloaded x store) create new client on auth server. is, far can think correct.
we have 2 kinds of workflows:
1. new account
in application accessing server's new account page , make new account, at phase have create new accepted client on server, application automatically created when access new account page , details app pushed outside of server iframe postmessage can save them inside application.
from on, when/if expires , no refresh token given, user can log in again making auth string described here https://github.com/frankhassanabad/oauth2orizerecipes/wiki/resource-owner-password-credentials, when combined user , password, return valid token , refresh token.
all nice , dandy, on client calculating in how time token expire , if user has accessed application after token has expired send refresh token new ones.
2. login different device
this in dark, have idea make/think workflow, access/auth need set of clientid , clientsecret, don't have those, user can log in own account.
i lost :)
the purpose user have management tab can see devices/clients have accessed application , revocation rights.
i starting question if authentication model in 1 :), thinking realized sound workflow having server side application, access there, , there have management , there can allow new devices generated clientid , secret copied other device want log in with.
total blur
Comments
Post a Comment