Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What does OAuth 1.0 realm stand for?

Tags:

oauth

The OPTIONAL realm parameter is added and interpreted per [RFC2617], section 1.2. [OAuth 1.0]

What is the difference between a request with and without a realm field?

like image 334
wenlong Avatar asked Dec 20 '11 15:12

wenlong


1 Answers

The Provider basically decides if this is of any importance. It is the counterpart of the WWW-authenticate response header. If a sever returns a WWW-authenticate header of 'OAuth realm="https://api.example.com"' then it probably parses that value from the Authenticate request header in the OAuth process.

These headers have a more direct implication when using HTTP-basic authentication since all browsers support this.

When using OAuth and WWW-authenticate header it is mostly good form I would say. With the added benefit of not having API responses cached in proxies/nodes across the Internet.

like image 69
Jon Nylander Avatar answered Oct 07 '22 06:10

Jon Nylander