This project is not covered by Drupal’s security advisory policy.

Services 3.x supports oauth authentication while it is just a single server solution. For a complete oauth process, you need user (Client), oauth consumer and oauth provider. In a production environment, it usually comes with 2 servers. This project aims at providing the oauth client required to complete the oauth process while both oauth client and oauth server are using Drupal.

The module is current tested with drupal-for-ios library. More success case is coming ~

Auth process
Step 1: (ios) client call oauth consumer (oauth3legged_client module)
Step 2: oauth consumer redirect client to oauth provider (input in configuration page) with request_token
Step 3: oauth provider identify the person with local authentication
Step 4: Return to oauth consumer server by callback URL with custom URL schema and access_token in $_SESSION
Step 5: The custom schema triggered an action on the ios client handleOpenURL, it analysis the request and replace the custom schema with http
Step 6: Replacing schema on ios with http triggers the oauth3legged_client again and save the access_token
Step 7: oauth3legged_client replace the schema to custom schema again to inform ios client to close the UIwebview

reference: http://www.workhabit.com/blog/using-oauth-drupal-ios-sdk

The module is sponsor by horizonlink shanghai :)

Project information

Releases