Jump to content

m3vo

Resident
  • Posts

    1
  • Joined

  • Last visited

Posts posted by m3vo

  1. On 9/15/2020 at 9:28 PM, SophieJeanneLaDouce said:

    In response to Oz Linden's comment
     


    I know that this is a specialized way and doesn't address most cases, but it fits my needs.

    I use OAuth2 in my scripts.
    When a script starts, it presents client credentials  to an authentication server.

    It receives an access token back, which the script remembers (below). This oath2header is added to all the HTTP requests from the script.

    
    list oauth2header = [HTTP_CUSTOM_HEADER,"Authorization","Bearer " + llJsonGetValue(body, ["access_token"])];

    The benefit I receive is middleware on my server rejects all requests that don't have a valid access token.
     

    Hi, does this actually work? Currently it appears that the Authorization header is part of the blocked list and so this comes back as a denied custom header. I've noticed that if you don't set HTTP_ACCEPT then it silently fails. Apologies if this has been discussed already but I would really love to use this feature. Currently the only way I can see this working is if I intercept the incoming request on my server and setting the Authorization header manually based on a token input.

×
×
  • Create New...