evome/oauned — Issue #4: Use token in HTTP headers to access protected resources
Author: vtourraine
Created: 2012-02-22 16:06:15+00:00
State: open

According to OAuth 2.0 spec, tokens should be passed using the HTTP `Authorization` request header field, instead of being passed as a regular request parameters, in order to access protected resources.

Resource request example:

GET /resource/1 HTTP/1.1
Authorization: OAuth2 7Fjfp0ZBr1KtDRbnfVdmIw

_Reference:_ [The OAuth 2.0 Authorization Protocol / draft-ietf-oauth-v2-23](http://tools.ietf.org/html/draft-ietf-oauth-v2-23#section-7)