OAuth2 API Tokens

Component ID

2451781

Component name

OAuth2 API Tokens

Component type

module

Maintenance status

Development status

Component security advisory coverage

not-covered

Downloads

1201

Component created

Component changed

Component body

This is a simple module which uses OAuth2 Server to provide API tokens.

The API tokens are OAuth2 tokens that the user may manually create, assign scopes to, and revoke. They can last forever (until revoked), so they are appropriate for the user to configure directly (but with care) in whatever API client they may be using.

API tokens must be kept secret: they should be treated like passwords (although, in several ways, they are more secure than passwords).