Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
How do I develop an OAuth Authorization page which a user can interact with but not the application being authorized?
I’m developing an API set and want to allow mobile apps to interact with the API, provided that they’re authorized to do so on behalf of the user.
Once I’ve authenticated the user, how do I ensure that the user has clicked the OK button, rather than the application itself?
Regards,
Yusuf
You could add the need to enter any type of verification code such as reentering a password or typing in a Captcha, before sending the access token.