Company
Date Published
Author
APIMatic
Word count
671
Language
English
Hacker News points
None

Summary

OAuth 2.0 is an open standard for authorization that allows a resource owner (user) to provide secure delegated access to their data on a resource server without sharing their credentials, enabling API providers to adopt the standard widely. The developer has completed the first iteration of adding proper support for OAuth 2.0 in their SDKs, addressing token acquirement and refresh mechanisms previously left up to the user. The updated SDKs now support all grant types, including implicit flow only for AngularJS applications running in browsers. To get started with OAuth-enabled SDKs, developers need to update authentication settings in their API description and configure required parameters like Redirect URL and Client Secret. The implementation of token acquirement mechanisms varies for different grant types, but the SDK seamlessly obtains an access token before making secure endpoint calls, and handles token refresh automatically.