@stephancill

experimenting with WWW-Authenticate headers for advertising oauth on permissioned endpoints (e.g. mutuals only) the client or server initiating the request can then exchange a signature for a session token and re-request the data if they have access github: https://github.com/stephancill/eth-private-data-repo .

3 replies

2 recasts

22 reactions