|
|
|
|
|
|
by andrewmccall
5302 days ago
|
|
|
Except the client id has to be generated so that you know which client was authorised with it - in the case of something like Facebook or twitter, so you can revoke their access. That means you have to agree on a way of exchanging that client ID. Which at it's simplest is what OAuth 2 does with bearer tokens. If you have no use for the other parts of the spec then just ignore them, it's all optional and you only need to implement it if you need it. |
|
|