Chapter 49. OAuth Validator Modules#
Chapter 49. OAuth Validator Modules
Table of Contents
Tantor SE provides infrastructure for creating custom modules to perform server-side validation of OAuth bearer tokens. Because OAuth implementations vary so wildly, and bearer token validation is heavily dependent on the issuing party, the server cannot check the token itself; validator modules provide the integration layer between the server and the OAuth provider in use.
OAuth validator modules must at least consist of an initialization function (see Section 49.2) and the required callback for performing validation (see Section 49.3.2).
Warning
Since a misbehaving validator might let unauthorized users into the database, correct implementation is crucial for server safety. See Section 49.1 for design considerations.