Hacker News new | ask | show | jobs
by sjtgraham 3695 days ago
Hey Jonas! TAuth is simpler than OAuth 2.0 and doesn't suffer the same security issues. So… why use OAuth?
2 comments
jhuckestein 3695 days ago
The devil you know I suppose ;)

IIRC we didn't go too far down the client cert route because we're behind CloudFlare and we like it that way. Something to revisit in the future.

link
lmm 3695 days ago
The three-legged flow from OAuth is widely needed. (I would agree with sticking to earlier versions that allow more specific tokens though)
link