I have a site where members login (Forms Auth). I would like for them to accept/reject friend requests and use jQuery to hit a protected service to either approve/reject their request.
I'm considering using oAuth to protect the services, which would allow other clients (asp.net, php, ruby) to access the service. Is oAuth a good solution? In a presentation that Ron Jacobs gave he mentions using a Request Interceptor to protect resources, so not sure how difficult and secure oAuth would be.
To connect from the client (jquery) I have two solutions:
- Include the access key in the url that jQuery will POST to (not really secure since it can be seen in the source code, but this is basically what twitter does), or,
- Have a proxy on my website that the jQuery will post to (no need to have the oAuth access key in the url). That proxy would then make sure the user is logged into the site and then have the proxy hit the web service ...
Go to the complete details ...