Aqueduct has types to manage authentication and authorization according to the OAuth 2.0 specification. The following tasks are important for this behavior:
AuthServerinstances to enable OAuth 2.0 in an Aqueduct application
ManagedAuthDelegate<T>to manage storage of authorization objects, e.g. storing tokens in a database.
AuthControllerto expose endpoints for exchanging credentials for authorization tokens.
Authorizers to a channel to allow only authorized requests.
- Managing OAuth 2.0 Client identifiers, secrets and scopes with the