authorization - Which form of Authentication should I use? -
I am writing a web adi to use my information on my site for my users. However, I'm not sure what kind of authentication I should use for this type of work.
Here's my intention:
One of my users develops an app that requires information for them from my server account he sends me a key and I verify I am a legitimate user.
There should not be any 'middle-male' app that is doing anything from the user. Just the owner of the account, currently I am using a system where I have a GUID and the user sends me that string. I decrypt it, and check your database for that key.
I'm not sure what this method is called, but it seems to work, does anyone have a better solution that I can use it (maybe) using better web standards is?
More information about this question:
OAuth is an authentication protocol Allows you to interact with one another on your behalf without giving your password .
taken from:
Comments
Post a Comment