Home/ Questions/Q 8255843
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-08T01:39:54+00:00

I am developing an application with Play 2.0 and Scala that exposes some REST

  • 0

I am developing an application with Play 2.0 and Scala that exposes some REST API. These APIs will be used by different applications, web, mobile or desktop, so the OAuth protocol (OAuth2) seems the most suitable.

Also I would initially use an external OAuth Provider such as Facebook.

My question is: what is the exact flow to authorize the individual REST call? What should I expect on the server side for each call and what I should check with the external provider?

With OAuth1 I knew that the client sent the token with all the signed request, but with Oauth2 I think not so, I imagine that if a token is not signed is not trusted and therefore I do not think this is the flow.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You could use a module called SecureSocial.

    https://github.com/jaliss/securesocial/

    This one is quite refined and many people in Play community seem to be aware/using this module.

    For authorization might be useful.
    https://github.com/schaloner/deadbolt-2/

    For end to end scala stuff,
    https://github.com/t2v/play20-auth

    • 0