News for hackers. Stuff that matters.

A comment on OAuth 3. Parent comment

Re:OAuth 3 by pwinnski on Thursday October 22, 2020 @11:34AM (#24859117)
I hadn't considered the one-way nature of dumping Java classes to JSON.

Mainly because I work with classes that are serialized both to and from JSON, rather than having Jackson annotations added much later.

I can see it now. Horrifying! I'm sorry for your troubles.

[ Parent | on HN ]
Re:OAuth 3 by mumblemumble on Thursday October 22, 2020 @11:49AM (#24859312)
My take-away is this: Protocols should always be defined independently of any existing code.

The code-first approach only works well when you're doing something self-contained. Which, an API, almost by definition, is not.

[ Parent | on HN ]
Re:OAuth 3 by pwinnski on Thursday October 22, 2020 @02:09PM (#24861189)
I generally try to design APIs from a consumer perspective, and then usually I end up with something RESTful. Let the server do whatever it has to do, you know?
[ Parent | on HN ]