Authentication

Work in Progress

api.metacpan.org implements an OAuth 2.0 Server and holds the user data. It helps a great deal to know the spec (http://tools.ietf.org/html/draft-ietf-oauth-v2-20#section-4.1).

The user data consists of

id

Unique identifier for the user

identity

List of authentication providers the user has authorized against. Each entry consists of:

• name

  Name of the authentication provider (twitter, pause, facebook, et al)

• key

  Key provided by the authentication provider that identifies the user

• extra

  Extra information that is available from the provider

access_token

list of access tokens for each front-end the user is connected with

code

holds the temporary OAuth code

The authentication process works as follows:

• The user clicks on "Twitter" as authentication method on metacpan.org
• She is redirected to api.metacpan.org