is it possible (and does it make sense) to use OAuth for granting permissions to selected resources? Any example and Use Case I found so far cares about the question how to grant access to whole permission areas (“access user profile data”, “access object data”). What I need is to “Grant read access to object XY”. Is OAuth capable to do this? If not, are there any alternatives?
Share
this really depends on the service provider specs. when you say “object XY”, if you mean a specific json object then the answer is yes. many service providers return json or xml data. oauth can return at most:
all of these conditions must be met before your app gets any data from the service provider. but if the service provider has the object you require in its oauth scope (in oauth2 lingo) then you can get it.
i may have misunderstood your question though. which service provider(s) are you interested in, or are you considering setting up a service provider of your own?