I'm amazed there is no open-source, drop-in HTTP proxy to authorise access to REST APIs. The closest I've found is PingFederate, which is kind of expensive, and DoorMan[1], which seems incomplete and unmaintained.
Am I the only person who'd find this useful? What are other people doing - building it into their APIs?
Comments
I've been looking at OAuth a bit lately.
I'm amazed there is no open-source, drop-in HTTP proxy to authorise access to REST APIs. The closest I've found is PingFederate, which is kind of expensive, and DoorMan[1], which seems incomplete and unmaintained.
Am I the only person who'd find this useful? What are other people doing - building it into their APIs?
[1] https://github.com/movableink/doorman
Most people are integrating libraries into the server side, I guess. Security HTTP proxies are something that I have only seen in banks.
Some are scripting it into the web server (nginx in this case): http://seatgeek.com/blog/dev/oauth-support-for-nginx-with-lu...
Interesting. I quite like that approach.