Really? So I attempted to get this framework working in my app for hours. It requires that you use the google model objects and the xsrfutil libs to work (I guess I never got it to).
This FLOW framework obscures the oauth2 process from the developer, so you are completely dependent on the code base being simple to understand to get the implementation working. Secondly creating the oauth2 app client credentials are buried deep in google's "API Dashboard". It was the longest amount of time I have ever spent on an oauth2 implementation. I have done many of these and this one is very difficult to work with.
Compare this to oauth2 providers that actually give you the curl approaches directly, and allow you to compare it to their API. Their oauth2 implementation is not hidden, and you can easily figure out what needs to be done.
Pretty good outh2 implementation, well documented, easy to use API. Poor user object returned on successful auth in some cases.
Its good. Period.
Good implementation and documentation. The python examples were a little off but a python dev can figure it our. Their support responds to problems. Worthy.
Here are my recommendations to oauth providers:
- Make the entire three legged process easy to natively implement via curl commands.
- Build auth apis that are simple extensions of that flow
- Make sure that the client api can access enough user information to create a user record on the target app without asking for more information.
- Make it easy for developer to create client app secrets and manage multiple environments.