是否可以为我自己的WebSite公开一个API…但是使用oAuth进行api身份验证？

Question

currently I expose an Api for my website. Works great .. and i use Basic Authentication to authenticate users to get access to the data.

eg.

http://www.MyWebSite.com  <-- main site.
http://api.MyWebSite.com  <-- my api website.

sample api RESTful url

http://user1:pass1@api.MyWebSite.com/games?type=battlefield2

(yes yes i know browsers stop people from putting in user1:pass1 (Basic Auth) into the url directly .. cause of security . but it's to highlight that we're using Basic Auth)).

So .. how can i do this with oAuth?

Answer 1

You might consider looking at these resources to get rolling with OAuth in an ASP.NET application or with WCF services:

• http://oauth.net/code/
• http://weblogs.asp.net/cibrax/archive/2008/11/14/oauth-channel-for-wcf-restful-services.aspx