ajax - Cross origin OAuth authentication with ServiceStack -
i use api website authentication & authorisation of users , ideally keep ui site purely static content (html, js, css). have configured servicestack's oauth & openid (and credential/basic) providers, answer api.mysite.com/auth/{provider} requests
i able users of www.mysite.com able authenticate , make calls api site via ajax.
the bootstrapapi example project - although useful - demonstrates api & website running on same domain.
- is possible/secure static javascript client?
- could share cookie between sub-domains?
- could return access token client , have use calculate authorization header before each request?
to address questions -
- is possible/secure static javascript client? yes
- could share cookie between sub-domains? yes
- could return access token client , have use calculate authorization header before each request? sure may use built in auth cookie.
it's matter of setting cookies on top level domain, similar what's shown @ servicestack - authentication domain , subdomains
Comments
Post a Comment