title: securing a REST api for nodejs/express/passport
body: <p>So we have our application in nodejs ready, implemented with passport as authentication framework on top of express/nodejs. The routes had been designed as REST API.</p>
  
  <p>Now, there's a request to make the routes available as REST API to non-browser clients. </p>
  
  <p>How would I go about implementing this when our app already works well with passport for authentication? Can passport be used for that? Or another framework, like Oauth? Would they be compatible or would I need to dismantle the passport code to implement with Oauth?</p>
  
  <p>Coulnd't find relevant information yet.</p>