开发者

What is a good way to secure a desktop application API that is exposed via HTTP+REST?

开发者 https://www.devze.com 2023-04-03 08:16 出处：网络

I\'m thinking about building a Mac (maybe later Windows) application that would expose its开发者_如何学Go plug-in API to other processes on the same machine via HTTP/REST. Are there any good libraries

相关专题：desktop-application oauth-2.0

I'm thinking about building a Mac (maybe later Windows) application that would expose its开发者_如何学Go plug-in API to other processes on the same machine via HTTP/REST. Are there any good libraries or good practices you can recommend for validating and restricting access to this API? Does OAuth2 make sense in this context? There don't seem to be a lot of (any?) OAuth2 service provider implementations available for desktop platforms, but I don't see any obvious alternatives to it either.

I'm also considering using CouchDB and I'd like to have a single authentication scheme for reading/writing CouchDB and the non-database functions.

you may want to investigate the Ubuntu DesktopCouch project that has been going through that exercise about two and a half years ago and that we built the CouchDB OAuth support for. Hope this helps!