News for hackers. Stuff that matters.

A comment on OAuth 3. Parent comment

Re:OAuth 3 by mumblemumble on Thursday October 22, 2020 @11:49AM (#24859312)
My take-away is this: Protocols should always be defined independently of any existing code.

The code-first approach only works well when you're doing something self-contained. Which, an API, almost by definition, is not.

[ Parent | on HN ]
Re:OAuth 3 by pwinnski on Thursday October 22, 2020 @02:09PM (#24861189)
I generally try to design APIs from a consumer perspective, and then usually I end up with something RESTful. Let the server do whatever it has to do, you know?
[ Parent | on HN ]