Acquia Developer Center Blog: Decoupled Drupal Authentication with OAuth 2.0

0 Flares Twitter 0 Facebook 0 0 Flares ×

Perhaps the most critical component of any decoupled Drupal architecture is a robust authentication mechanism that protects data transmitted between a Drupal site and API consumers like JavaScript applications and native mobile applications. While Drupal core makes available HTTP Basic Authentication and cookie-based authentication, both easy to use, neither of these approaches is sufficiently secure when it comes to best practices.