OAuth WRAP viewed as project to watch in 2010

1 view
Skip to first unread message

Dick Hardt

unread,
Jan 1, 2010, 3:14:36 PM1/1/10
to WRA...@googlegroups.com
From: http://www.techcrunch.com/2009/12/31/daniel-raffel-favorite-products-2009/?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+Techcrunch+%28TechCrunch%29

OAuth WRAP (Web Resource Authorization Protocol)
For a variety of situations where a developer simply wants to integrate with an API via POST the OAuth dance can a bit of a headache. OAuth WRAP is not much different than OAuth except that a client only has to pass the Access Token in the HTTP Authorization header, so it completely eliminates the need for signatures. All server-to-server WRAP calls happen via SSL. An additional benefit of eliminating signatures is that one can curl OAuth-WRAP requests without requiring any special libraries. There is an active working group fleshing out a spec and I expect to see widespread adoption of this in 2010 coming via products from the major service providers (specifically Facebook, Google, Microsoft, and Yahoo!).

Reply all
Reply to author
Forward
0 new messages