docs: Add OAuth 2.0 & JWT how-to #204
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #204 +/- ##
=======================================
Coverage 93.45% 93.45%
=======================================
Files 17 17
Lines 2184 2184
=======================================
Hits 2041 2041
Misses 105 105
Partials 38 38 ☔ View full report in Codecov by Sentry. |
Insei
left a comment
There was a problem hiding this comment.
Great work! It's a nice description!
sm3142
left a comment
There was a problem hiding this comment.
@danielgtaylor Thanks for the good work. I think this will help a lot of people!
I tried to clear up some of the misconceptions regarding what OAuth2 is (authorization) and isn't (authentication) and OAuth2 being quasi synonymous with JWT (it is not). Fell free to use these suggestions or not - as I mentioned elsewhere, the distinction is not super important for the purpose of the document.
I also added a section regarding different token formats. Since I will have to do just that in the not so distant future (i.e. use opaque access tokens), I may be able to provide an abstract implementation at a later stage.
Co-authored-by: Stefan Moser <6841360+sm3142@users.noreply.github.com>
Co-authored-by: Stefan Moser <6841360+sm3142@users.noreply.github.com>
Co-authored-by: Stefan Moser <6841360+sm3142@users.noreply.github.com>
Co-authored-by: Stefan Moser <6841360+sm3142@users.noreply.github.com>
Co-authored-by: Stefan Moser <6841360+sm3142@users.noreply.github.com>
Co-authored-by: Stefan Moser <6841360+sm3142@users.noreply.github.com>
Co-authored-by: Stefan Moser <6841360+sm3142@users.noreply.github.com>
Co-authored-by: Stefan Moser <6841360+sm3142@users.noreply.github.com>
Co-authored-by: Stefan Moser <6841360+sm3142@users.noreply.github.com>
|
@sm3142 @Insei sorry for the delay. I caught covid and have been pretty sick. Thanks for all the help, I've applied all the suggestions and will merge this in, but feel free to open additional PRs if you think anything else should get added or updated 👍🏻 Edit: it's live now at https://huma.rocks/how-to/oauth2-jwt/ |
|
@danielgtaylor, hope you feel better now. Thanks for all the effort! |
This takes some of the information from #202 and #186 and tries to put together a simple how-to for people wanting to add OAuth 2.0 based auth with JWTs to their API.