Implementing Three-Legged OAuth with Digital Streams
Blog post from PubNub
Integrating cloud services and webtail vendors with digital identity platforms like Google+ or Facebook is commonly achieved using three-legged OAuth, which provides a more secure authentication method by removing the need for applications to manage third-party user credentials and allowing users to control access. This method involves an application requesting a protected resource from an identity provider like GitHub, which redirects the user for authentication and authorization, ultimately granting an access token. In real-time solutions, additional components such as a Security Authority (SA) are needed to manage user permissions dynamically through channels, as exemplified by the HubBub server's node-based express app interacting with PubNub's Access Manager. Setting up this security framework involves creating PubNub keysets, registering the application on GitHub, and configuring the HubBub server to act as the SA, which can be adapted to work with other identity platforms that support OAuth 2.0.