Good day to anyone reading.
I am starting a project where I'm required to implement OAuth 2.0 protocol using our own server acting as both an authorization and resource server.
I did some initial research, mainly reading through OAuth 2.0 specification and it looks pretty straightforward. However, I do have some concerns that I would like to share:
First of all, how would I go about generating clientID and secret for my application? Also, where to store those?
Can I make use of OWIN middleware to actually generate tokens?
I found an interesting article
here explaining how to implement a simple OAuth server. Anyone has any other resources to share?
As you can see I barely scratched the surface, so if anyone has some pointers to share, ...
Go to the complete details ...