Re:Why is OAuth still hard in 2023?
by lll-o-lll on Wednesday April 26, 2023 @04:43PM
(#35719724)
OAuth client credential flow is this easy mode you ask for. It’s one call with a secret in it and back comes a token.
[ Parent
| on HN ]
The problem is "client credential" flow is not always available... And even if it were it might not as easy as you claim. In particular if you want to have an access token working on several instances. Most implementation allows only one access token at once so you need to have a shared storage and synchronization just for that...
If you are developing an API please have mercy: provide something other than OAuth. For me, avoid OAuth unless there is 3 distinct parties.