Technically OAuth doesn't even give you user info, you're ... • Aaron Parecki

49°F

Jeena https://toot.jeena.net/@jeena • Feb 20
@aaronpk I'm guessing you might know better, with #OAuth is it possible to only get the info if the user is who they claim to be (but without a password) or is it also possible to get the info to for example which groups he/she is associated with (like admin, user, reader)?

Technically OAuth doesn't even give you user info, you're getting in to OpenID Connect/IndieAuth territory if you want that. As for groups and roles, those are super specific to the implementation so aren't really part of the standard at all. You can use OAuth as a framework to do this but you won't find much in the way of standards for it.

Chicago, Illinois • 36°F

Wed, Feb 20, 2019 2:51pm -06:00

1 reply
Have you written a response to this? Let me know the URL:
- Jeena toot.jeena.net/@jeena
  
  @aaronpk ok thanks a lot that makes it clear, then I know what I need to google for!
  
  Wed, Feb 20, 2019 10:05pm +00:00

Posted in /replies using monocle.p3k.io