Hello, Do you usually use OAuth 2.0? or OAuth 1.0?...
# suitescript
m
Hello, Do you usually use OAuth 2.0? or OAuth 1.0? I have an impression that no one is using OAuth 2.0 🤷‍♂️
b
OAuth 2.0 Authorization Code Grant is useless
OAuth 2.0 Client Credentials might not be useless, but too hard to implement
m
I was just reading the thread above.
Sometimes the clients find it hard to implement OAuth1.0
b
that wont improve trying to do client credentials
at least with oauth 1 the library support is more mature
netsuite's client credentials use the draft client assertions
which is gonna be harder to find support for
m
isn't OAuth 2.0 more secure than OAuth 1.0?
b
normally not, but id guess that netsuite's implementation of jwts makes it more secure
m
then will stick to OAuth 1.0, thanks you
b
id expect OAuth 2.0 Client Credentials to be better after they fix their documentation
right now there is a high cost to use it
if/when netsuite deprecates TBA, you probably will have to switch to client credentials
t
@battk You mention the following:
id expect OAuth 2.0 Client Credentials to be better after they fix their documentation
Do you know which statements in the documentation for OAuth 2.0 Client Credentials and The Request Token Structure is incorrect and what it should read instead? Were you able to get OAuth 2.0 Client Credentials working?
b
got it working, but I dont trust something where the documentation is wrong
its actually slightly less wrong than it was before, which is absurd since that means they fixed the documentation a little and left the rest of it wrong
t
Thanks @battk for your reply