CODEWITHSUNDEEP
c#asp.netoauth-2.0
NoobDeveloper
NoobDeveloper

Reputation: 1887

Responsibility to store tokens in OAuth 2.0

If I am building a library in .NET based on, say FB or Google API, we get an access token (short lived) and a refresh token (long lived).

As a developer who wishes to build such a library, whose responsibility is it to store those tokens?

  1. The client library developer or

  2. The application consuming my library

Upvotes: 2

Views: 404

Answers (1)

Mark S.
Mark S.

Reputation: 4019

I would assume the application consuming your library, since the client library doesn't know how the application wants to store the tokens. I've had tokens stored in databases. I've had them retrievable only by web service. I even had some hardcoded for a test application I worked on.

Upvotes: 2

Related Questions