Changes between Version 3 and Version 4 of FeatureRequests/SecurityFeatures


Ignore:
Timestamp:
13.08.2011 13:39:06 (13 years ago)
Author:
Malte
Comment:

added infos about tokens into linked in OpenAuth-Page

Legend:

Unmodified
Added
Removed
Modified

  • FeatureRequests/SecurityFeatures

    v3 v4  
    9393 
    9494Server creates Token for user and validates the token (like Kerberos or OpenAuth).  
     95 
     96Since the need evolved to associate/store various tokens from third party services with a deepamehta-identity/user, i did a bit of research on oauth and gathered some resources around this topic on the OpenAuth-Page. Basically the oauth tokens can be stored opaque to the client/user but i wonder if that would be a good idea in a multi-user environment, so we possible need a encrypt/decrypt mechanism also for such access/refresh_tokens.