ajax - Cross origin OAuth authentication with ServiceStack -


i use api website authentication & authorisation of users , ideally keep ui site purely static content (html, js, css). have configured servicestack's oauth & openid (and credential/basic) providers, answer api.mysite.com/auth/{provider} requests

i able users of www.mysite.com able authenticate , make calls api site via ajax.

the bootstrapapi example project - although useful - demonstrates api & website running on same domain.

  • is possible/secure static javascript client?
  • could share cookie between sub-domains?
  • could return access token client , have use calculate authorization header before each request?

to address questions -

  • is possible/secure static javascript client? yes
  • could share cookie between sub-domains? yes
  • could return access token client , have use calculate authorization header before each request? sure may use built in auth cookie.

it's matter of setting cookies on top level domain, similar what's shown @ servicestack - authentication domain , subdomains


Comments

Popular posts from this blog

blackberry 10 - how to add multiple markers on the google map just by url? -

php - guestbook returning database data to flash -

delphi - Dynamic file type icon -