Skip to content
Frost edited this page Jun 3, 2014 · 1 revision

Snaggle OAuth Library

The Snaggle OAuth Library is designed to make the use of OAuth 1/2 Client and Server as easy as possible. The goal is to be able to provide all the functionality you'd ever need for consuming or providing OAuth capabilities in a single library. The following is a list of the capabilities of this library for each version and role.

OAuth 1.0 Client

  • Provide steps for obtaining tokens
  • Creation of the OAuth Signature
  • Creation of the Authorization Header

OAuth 1.0 Server - not implemented

  • Provide steps for creation and verification of token requests
  • Provide validation for signatures in the request

OAuth 2.0 Client

  • Provide steps for obtaining tokens for Authorization Code, Implicit, Resource Owner, Client Credential grants
  • Provide steps for using a refresh token
  • Build Token header to be included in request

OAuth 2.0 Server

  • Provide steps for creating and distributing tokens for the Authorization Code, Implicit, Resource Owner and Client Credential grants
  • Provide functionality to isolate requested scopes

OAuth cannot handle the Access Control portion of your application, so that should not be expected in a library like this. However, this functionality should take a lot of the pain out of providing and consuming services that want to use OAuth for Authentication.