Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

LinkedIn Oauth - Revoke access from C#

I have my users already authenticated to my LinkedIn app but I also want to give them the possibility to de-authenticate from my app any given time.

I think I'm just missing the http delete url to do it but i'm not sure.

Thanks

like image 851
franciscovalera Avatar asked Jun 22 '12 13:06

franciscovalera


1 Answers

The OAuth protocol is specifically designed to not allow what you are attempting to accomplish. The OAuth security model introduces a third concept to the traditional client-server authentication model, and this is called the resource owner. The resource owner (your end-users) is the only party that can grant and revoke access. Perhaps you could provide a message to your users that they should visit LinkedIn to revoke access to assist them with that process (I suppose you could also redirect them to LinkedIn's website). Ultimately though, if I were the end-user, I'd want to visit LinkedIn myself to revoke access.

like image 146
bahrens Avatar answered Nov 08 '22 00:11

bahrens