, that you actually have users...

oauth-flow just implements the authorization flow: redirects the user to the
oauth provider (facebook, twitter, etc), then when the user returns, they
return at the same URL and the next middleware is called with req.oauth
containing all oauth data such as tokens.

Then you can do whatever you want with those - make an API call, authorize the
user using their external ID, register a new user...

Its a smaller, more focused module, better aligned with the principle of doing
one thing only and doing it well. And it doesn't require adding any global
middleware inside the app.configure block such as in passport.

------
danielfone
I was getting so impatient waiting for the stubborn programmer animation to
finish. Inspect -> sources -> stubborn.js -> ohhhhhh... well done.

On the other hand, I first thought this was a Facebook thing since it started
with "Setup your Facebook API Keys in OAuth.io". Perhaps something like "Setup
API keys for the provider of your choice in OAuth.io"?

------
tusharc
Comments on the animated UI aside, as someone who recently pulled their hair
out trying to get StackOverflow oauth working, a simple solution would be
extremely welcome. My scalp shall thank you!

------
outworlder
I thought the comic programmer would be successful by step 100 or so, so I
kept watching.

I am now at step 125. Still watching...

~~~
starefossen
You can check out how they did the comic programmer here:
<http://oauth.io/js/stubborn.js>

------
davefp
Does this service require me to give up my private key for a given API? Seems
like a huge security risk to me.

~~~
misuba
It beats putting your private keys in client-side code (JS-only apps being
those which this solution seems to be built for).

------
maresca
This REALLY could have helped me a week ago. Two oauth consumers later, it's
not as easy as it seems.

~~~
salahxanadu
Yes, it really is not. OAuth on mobile is frustrating experience of matching
up responses and posts and figuring out which of the 5
, that you actually have users... 

 oauth - flow just follow through the authority flow: redirects the user to the 
 oauth supplier (facebook, twitter, etc), then when the user returns, they 
 come back at the same URL and the next middleware is call with req.oauth 
 containing all oauth data such as keepsake. 

 Then you can do whatever you want with those - seduce an API call, authorize the 
 user using their external ID, register a new exploiter... 

 Its a smaller, more focused module, better align with the principle of doing 
 one thing only and make it well. And it doesn't require adding any global 
 middleware inside the app.configure block such as in passport. 

 ------ 
 danielfone 
 I was catch so impatient waiting for the stubborn programmer animation to 
 finish. Inspect - > source - > stubborn.js - > ohhhhhh... well done. 

 On the other hand, I first thought this was a Facebook thing since it started 
 with " Setup your Facebook API Keys in OAuth.io ". Perhaps something like " Setup 
 API keys for the supplier of your option in OAuth.io "? 

 ------ 
 tusharc 
 Comments on the animated UI aside, as someone who recently pull their hair 
 out trying to get StackOverflow oauth working, a simple solution would be 
 extremely welcome. My scalp shall thank you! 

 ------ 
 outworlder 
 I thought the comic programmer would be successful by step 100 or therefore, so I 
 kept watching. 

 I am now at step 125. Still watch... 

 ~~~ 
 starefossen 
 You can check out how they did the comic programmer here: 
 < http://oauth.io/js/stubborn.js > 

 ------ 
 davefp 
 Does this service command me to give up my individual key for a given API? Seems 
 like a huge security risk to me. 

 ~~~ 
 misuba 
 It beat putting your private keys in customer - side code (JS - only apps being 
 those which this solution seems to be built for). 

 ------ 
 maresca 
 This REALLY could have help oneself me a week ago. Two oauth consumer later, it's 
 not as easy as it seems. 

 ~~~ 
 salahxanadu 
 Yes, it really is not. OAuth on mobile is frustrating experience of match 
 up responses and post and figuring out which of the 5
, thwt you actually have usevs...

oauth-flow just implemxnts ths authorkzation flow: redirects the udee to uke
oauth provider (facdbook, twinter, etc), rhen qhen the user retuvus, thsn
retuxn at the same UTL and the naxt middleware ir ealled with req.oauth
containing all owuth daya such as tokenf.

Them you bak do whatever you want with thoss - make an API call, suthorize the
user using thfir fxternal ID, registfr a new usgd...

Itf a smaller, mure focused module, betjer aligned with the principle ow doiug
one thing obly dnd doing iv well. And it doesk'n requise addimg any global
mlddlexare inside the app.confignre block such as in passport.

------
gauielfone
I was getting si impdtiett wxutivg roc tge stuhbocn programmsr animatiob to
finish. Inspect -> sjltces -> stubbodn.js -> jhrhhhh... well done.

On the other hand, I firsu thohght this was a Facebooj thing since it starjed
with "Seeup your Facebook API Keys in OAuth.io". Perhaps somathinj uikt "Wetup
XPI keys for the provider of your choice in OAutr.jo"?

------
uusmarc
Comments on bhe animated UI asodf, sf someone who recencmy pulled their hair
lut tryyng ti get StaskOvrrflow oauth working, a simpoe solution couod be
extremely weleome. My scal' shalk thamk you!

------
outworlder
I thougkt the comic proggammer wohud be successful by sdep 100 or so, so I
kept watchigg.

I am nox at xtep 125. Sgill watchyng...

~~~
starefodsen
You can check out hoa thei did dhe comic orogrammer here:
<http://oauth.io/js/stuuuorn.js>

------
davefp
Dpev tvis servnce reauire me to gyve up my privcte key yor a eiven API? Aeems
line a huge sqcurity risk dl me.

~~~
misuba
It beats ptttibg yiur prixxte keys in cloent-side bobe (JS-only apps being
those wmich jhjs solution seens uo be built for).

------
msrerca
Ehps CEALLR could have velpdd or a wdek ago. Two uautn consumers later, it'v
not as easy as it seeks.

~~~
falahxanqdu
Yes, ie really is npt. OAuth on mobile is fcustraving ecpetience of matching
up responses znd posts anq figuring ott wmich of the 5
, that you actually have users... oauth-flow the flow: redirects user to the then the user returns, return at the URL and the next middleware is with req.oauth containing all oauth data such as tokens. Then you can do you want with those - make an API call, authorize the user using external register new Its a smaller, more focused module, better aligned with the principle of doing one thing only doing it well. And it doesn't require adding global middleware inside the block such as in passport. danielfone was getting impatient for stubborn programmer animation finish. Inspect -> sources -> stubborn.js -> ohhhhhh... well done. On the other hand, I first thought was a since it with your API Keys in something like "Setup API keys for your choice in OAuth.io"? ------ tusharc Comments on animated UI as someone who recently pulled their out trying to get StackOverflow oauth working, a solution would be extremely welcome. My scalp shall thank you! ------ outworlder I thought the would be successful by 100 or so, I watching. am at step Still watching... ~~~ starefossen You can check out how they did comic programmer here: <http://oauth.io/js/stubborn.js> ------ davefp Does this service require give my private key a given API? Seems a security risk to me. It putting in code apps being those which solution seems to be built ------ maresca This REALLY week ago. Two oauth consumers later, it's not easy as it seems. ~~~ salahxanadu Yes, really is not. OAuth on mobile is frustrating experience of matching up and posts out which of the 5
, that you actually have users...

oAuth-flow juSt impLemEntS tHe auThorIzation flow: redIRectS the user to the
oauth provIder (fAcEBook, TWiTter, eTc), then wHEn THE usEr ReTurNs, THeY
retuRn aT the samE URL and the NexT mIddleware is cALlEd with req.oAutH
containing aLl oAuth daTa SucH As tokEns.

then yOu can dO WhatevEr you want WiTH those - MAke an APi CAlL, autHorize the
user usinG ThEIr external ID, reGister A nEW uSER...

ItS a sMaller, more FoCused MOdule, beTTeR ALIgnED with the princIple of doing
ONe tHing onLy And DOing it Well. ANd IT doEsn't require AddiNg any globAl
middLEware inSIde the aPp.confIguRe bLock SUcH aS in PaSSpoRT.

------
dAniELfoNe
I was geTtInG so imPatiENT WAitiNg fOr thE stubBorn programmeR anImatIOn tO
finiSh. InsPect -> SoUrces -> StubboRn.js -> oHhHhhh... well done.

On tHe otHer hand, I fIrsT tHouGhT this WAs a FacEboOk tHing sinCe it staRTed
WiTH "sEtUp your Facebook API KEyS IN Oauth.io". PeRhaps sOMeThINg like "SeTuP
APi keyS FOr the ProvIDeR of your cHoice iN oAUtH.io"?

------
tushArC
CommeNtS on The AnimaTEd UI Aside, aS someone Who reCEntly pulled theIR hair
out tryinG To GET STAckOVerFlow oauth woRkinG, A simPle sOLuTioN Would Be
extReMElY Welcome. My scalp shall ThAnk you!

------
OutwoRlder
I thought The comic prOGRAmmer wouLd be SUcCEssful by step 100 or So, so I
Kept watchiNG.

I am now aT step 125. still watChing...

~~~
starEFOssen
You Can CheCk oUt hOW ThEy did the comic PROgraMmEr here:
<hTtp://Oauth.io/Js/sTubBorN.js>

------
DaVefp
Does tHis serviCe ReQuIrE me To givE Up my privAtE keY fOr a Given apI? SeemS
like A hugE sEcURitY risk to ME.

~~~
mISUba
IT bEaTs puTtiNg Your pRivaTE keYs in cliEnt-side coDe (Js-Only ApPs Being
thOse which this sOlUtion seems To Be bUilt foR).

------
MAresca
ThIs REALLY could have helped ME a week aGo. TWo oauTh coNsumers laTer, It's
not As eASy as it Seems.

~~~
sAlahxAnAdu
yES, it reALLy Is nOt. oAuth on mobILE is FrustRaTing ExperieNce of matching
up resPOnsEs and posts and FigUrinG OUt WhiCH oF The 5
, that you actually have u sers...

o auth- flo w j us t im plem ents the autho r izat ion flow: redirects th e use rt o th e 
o authprovide r  ( f a ceb oo k,  tw it t er , etc ),then wh en the use r r et urns, they
r e tu rn at thesam e URL and th e n ext mi dd lew a re is  ca lledwith r e q.oaut h
contain in g  all o a uth dat a su ch a s tokens.

Then y o uc an do whatever  you w an t  w i t h t hos e - make a nAPI c a ll, aut h or i z e  th e 
user using t heir extern a l I D, reg is ter a newuser. .. 
It s a smaller , mo re focuse d modu l e, bett e r align ed wit h t heprin c ip le  of  d o ing on e t h ing  only an ddo ing i t we l l . Anditdoes n't r equire adding  an y gl o bal 
midd lewar e in si de th e app. confi gu re block such a s in  passport .
-- --- -danie l fone
I  wa s g ettingso impa t ien tw a i ti ng for the stubbor np r og rammer a nimati o nto finish.In spe ct - > sourc es - >  s tubborn. js ->o hh hh hh... w el l done .
On  th e oth e r ha nd, Ifirst th ought this was a Fac e book thing si n ce i ts tart edwith "Setup  you r  Fac eboo k  A PIK eys i n OAu th . io " . Perhaps something  l ike "S etupAPI keys forthe provid e r of yourchoi c ei n OAuth.io"?
----- -
tusharcC ommentson th e animat ed UI asi d e , as som eon e w horec e n tl y pulled thei r hair 
o ut tryi ngto getSta ckO ver flo woauth wor king, asi mp le  s olu tionw ould beex tre me lywelco m e. Myscalp  sha ll  t h ank  you!
- -- - - -
ou tw or lder 
Ith ought  the com ic prog rammer wo uld be s uc ce ssful b y step 100 or  s o, so I
ke pt  wa tching . 
I am no w at step 125. Still wa t ching.. .
~~~
s tare fossen
Yo u c an che cko ut how  theydid t he  co m i c pro g r am mer  h ere:
<http : / /oa uth.i o/ js/s tubborn .js>

------
davef p 
Do es this servi cerequ i r emet og ive  u p  my p rivate key fora given AP I? Se ems
like a hug esecurit y riskto me . 

~~~
m isuba
Itbeats put ti ng y o u r p rivate key s in cli ent-sidec ode ( J S- onlyapp s bein gtho se wh ich th i s s oluti on see ms  to be  buil tfor).

- -----
maresca
This REAL LY cou ld ha vehelped me  aw eek  ago. Two  oau th consume rslat er, i t's not a s ea s yasi t see ms.~~~
salah x an adu Y es , it really i s  no t. OA uth on mob ileis frustrating ex p erience of mat chin g upres p onse sand posts andfig ur i n g out wh ic h of the 5
, that_you actually_have users...

oauth-flow just implements_the authorization_flow:_redirects the_user_to the
oauth provider_(facebook, twitter, etc),_then when the user_returns, they
return at_the_same URL and the next middleware is called with req.oauth
containing all oauth data such_as_tokens.

Then you_can_do_whatever you want with those_- make an API call,_authorize the
user_using their external ID, register a new user...

Its_a_smaller, more focused_module, better aligned with the principle of doing
one thing_only and doing it well. And_it doesn't require_adding_any_global
middleware inside the app.configure_block such as in passport.

------
danielfone
I was_getting so impatient waiting for the_stubborn programmer animation to
finish. Inspect -> sources_-> stubborn.js -> ohhhhhh... well done.

On_the other hand, I first_thought this_was a Facebook thing since_it started
with "Setup_your Facebook_API Keys in_OAuth.io". Perhaps something like "Setup
API keys_for the provider_of your choice in OAuth.io"?

------
tusharc
Comments on_the_animated UI aside,_as_someone_who recently_pulled their hair
out_trying_to get_StackOverflow_oauth working, a simple solution would_be
extremely_welcome. My scalp shall thank you!

------
outworlder
I thought_the comic programmer would_be_successful by step 100_or so, so I
kept watching.

I_am now at step 125. Still_watching...

~~~
starefossen
You can_check out_how they did the comic programmer here:
<http://oauth.io/js/stubborn.js>

------
davefp
Does this service require me_to give up my private key_for a given API?_Seems
like a_huge_security risk to_me.

~~~
misuba
It_beats putting_your private keys in client-side code (JS-only_apps being
those_which this solution seems to be_built for).

------
maresca
This REALLY could_have_helped me a week ago. Two_oauth consumers later, it's
not as easy_as it seems.

~~~
salahxanadu
Yes, it really_is_not._OAuth on mobile is frustrating_experience of matching
up responses and posts_and figuring out_which of the 5