[nl]

I've been looking at OAuth a bit lately.

I'm amazed there is no open-source, drop-in HTTP proxy to authorise access to REST APIs. The closest I've found is PingFederate, which is kind of expensive, and DoorMan[1], which seems incomplete and unmaintained.

Am I the only person who'd find this useful? What are other people doing - building it into their APIs?

[1] https://github.com/movableink/doorman

[icoloma]

Most people are integrating libraries into the server side, I guess. Security HTTP proxies are something that I have only seen in banks.

[Gigablah]

Some are scripting it into the web server (nginx in this case): http://seatgeek.com/blog/dev/oauth-support-for-nginx-with-lu...

[nl]

Interesting. I quite like that approach.