Project: implement an OAuth provider API #216
Labels
🗂 Enhancement
Type: New features, improvements to the product
🚩 Help wanted
Particularly amenable/appropriate for contributors
Third-party applications using our API need to let users authenticate. Right now, we allow users to generate a "personal access token," but I've added that mode mostly for people experimenting with their own scripts. Those tokens aren't suitable for giving to a third-party app. The typical way to handle this authentication scenario is OAuth. Let's implement an OAuth provider for Orbit.
Scope-wise, I think we can start with a simple read-only and read/write permissions model.
The text was updated successfully, but these errors were encountered: