I&#39;ve just released [OAuthorize](https://github.com/jaredhanson/oauthorize), which is a suite of middleware for implementing an OAuth 1.0a server.  It is highly modular, letting you tune it to meet your requirements.  It integrates seamlessly with [Passport](http://passportjs.org/) for authentication, using [passport-http-oauth](https://github.com/jaredhanson/passport-http-oauth) to protect APIs using access tokens.

**Update:** [OAuth2orize](https://github.com/jaredhanson/oauth2orize) is now available.  It follows similar patterns, but implements support for OAuth 2.0.

Pierre Ruyssen has a few OAuth2 projects. I&#39;ve never used them nor do I know how far along they are, but you could check them out:

- https://github.com/AF83/oauth2_server_node
- https://github.com/AF83/oauth2_client_node
- https://github.com/AF83/auth_server



Searching http://search.npmjs.org I found https://github.com/selead/oauth-server, but it uses **OAuth 1.0A protocol** and **last commit was at April 19, 2011**. But then again I guess you should just have look and it might just fit your needs.


I found another one: https://github.com/ammmir/node-oauth2-provider. It use Connect and ExpressJS.

I need to fit two lines in one h1 tag (instead of making two separated h1 tags).

How can I create a line break inside of h1 tag?

Two lines in h1 tag

I am trying to make a view that will have a background that is not only transparent, but will also have a blur effect. That way the views underneath appear to be out of focus. I want it to look like the screen does after holding down the power button. Any ideas?

Create blurry transparent background effect

I only found the oauth client library for nodejs. Does anybody know where I can find a server implementation?

Thanks,
&lt;br/&gt;
Hao.

Is there a Node OAuth Server Implementation

I only found the oauth client library for nodejs. Does anybody know where I can find a server implementation?
Thanks,
 
Hao.

I would like to read a very, very large file into a JavaScript array in node.js.

So, if the file is like this:

    first line
    two 
    three
    ...
    ...

I would have the array: 

    [&#39;first line&#39;,&#39;two&#39;,&#39;three&#39;, ... , ... ] 

The function would look like this:

    var array = load(filename); 

Therefore the idea of loading it all as a string and then splitting it is not acceptable.



node.js: read a text file into an array. (Each line an item in the array.)

I&#39;ve searched a bit, but I can&#39;t find an existing tool for this.

I have a Node.js web server that is designed to run on your own computer that does some snazzy things for you.  It would be pretty awesome if I could double click `MySnazzyThing.app` instead of installing Node.js, and npm and running `node mysnazzyapp.js` on the command line.

The `.app` executable would spool up the Node.js server and open a simple native [WebKit][1] window which would show what would normally be on `localhost:3000` if I were running on the command line.

This native application could then, say, be distributed through the Mac [App&amp;nbsp;Store][2].  And bam, a Node.js desktop application.

Does any such tool exist? Or are there any technical reasons that this wouldn&#39;t work as I imagine it?

  [1]: https://en.wikipedia.org/wiki/WebKit
  [2]: https://en.wikipedia.org/wiki/App_Store_(iOS/iPadOS)




Packaging a Node.js web application as a normal desktop application

    var n = new Chat();
    n.name = &quot;chat room&quot;;
    n.save(function(){
        //console.log(THE OBJECT ID that I just saved);
    });

I want to console.log the object id of the object I just saved. How do I do that in Mongoose?

How do I get the objectID after I save an object in Mongoose?

Socket.io&#39;s readme contains the following example:
```js
    var io = require(&#39;socket.io&#39;).listen(80);

    io.sockets.on(&#39;connection&#39;, function (socket) {
      socket.join(&#39;justin bieber fans&#39;);
      socket.broadcast.to(&#39;justin bieber fans&#39;).emit(&#39;new fan&#39;);
      io.sockets.in(&#39;rammstein fans&#39;).emit(&#39;new non-fan&#39;);
    });
```
What&#39;s the difference between `socket.broadcast.to()` and `io.sockets.in()`?

Socket.io rooms difference between broadcast.to and sockets.in

I&#39;ve tried to research on how exactly asynchronous functions should be written. After a lot of plowing through a lot of documentation, it&#39;s still unclear to me.

**How do I write asynchronous functions for Node? How should I implement error event handling correctly?**

Another way to ask my question would be this: How should I interpret the following function?

    var async_function = function(val, callback){
        process.nextTick(function(){
            callback(val);
        });
    };

Also, I found **[this question on SO][1]** (&quot;How do I create a non-blocking asynchronous function in node.js?&quot;) interesting. I don&#39;t feel like it has been answered yet.


  [1]: https://stackoverflow.com/questions/2878008/how-do-i-create-a-non-blocking-asynchronous-function-in-node-js

How to write asynchronous functions for Node.js

I am just getting started working with Google API and OAuth2. When the client authorizes my app I am given a &quot;refresh token&quot; and a short lived &quot;access token&quot;. Now every time the access token expires, I can POST my refresh token to Google and they will give me a new access token.

My question is what is the purpose of the access token expiring? Why can&#39;t there just be a long lasting access token instead of the refresh token?

Also, does the refresh token expire?

See [Using OAuth 2.0 to Access Google APIs](https://developers.google.com/identity/protocols/OAuth2) for more info on Google OAuth2 workflow.

Why do access tokens expire?

Is it possible to get information from user&#39;s profile via Google API? If it is possible, which API should I use? 

I&#39;m interesting in such information:

 - Url to the user profile (e.g. https://profiles.google.com/115063121183536852887);
 - Gender (sex);
 - Profile photo.

Also it would be cool to get other information from user&#39;s profile.

Get user info via Google API

I don&#39;t know if I just have some kind of blind spot or what, but I&#39;ve read the OAuth 2 spec many times over and perused the mailing list archives, and I have yet to find a good explanation of why the Implicit Grant flow for obtaining access tokens has been developed. Compared to the Authorization Code Grant, it seems to just give up on client authentication for no very compelling reason. How is this &quot;optimized for clients implemented in a browser using a scripting language&quot; (to quote the specification)?

Both flows start out the same (source: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-22):

1. The client initiates the flow by directing the resource owner&#39;s user-agent to the authorization endpoint.
2. The authorization server authenticates the resource owner (via the user-agent) and establishes whether the resource owner grants or denies the client&#39;s access request.
3. Assuming the resource owner grants access, the authorization server redirects the user-agent back to the client using the redirection URI provided earlier (in the request or during client registration).
- The redirection URI includes an authorization code (Authorization code flow)
- The redirection URI includes the access token in the URI fragment (Implicit flow)

Here&#39;s where the flows split. In both cases the redirection URI at this point is to some endpoint hosted by the client:

- In the Authorization code flow, when the user agent hits that endpoint with the Authorization code in the URI, code at that endpoint exchanges the authorization code along with its client credentials for an access token which it can then use as needed. It could, for example, write it into a web page that a script on the page could access.
- The Implicit flow skips this client authentication step altogether and just loads up a web page with client script. There&#39;s a cute trick here with the URL fragment that keeps the access token from being passed around too much, but the end result is essentially the same: the client-hosted site serves up a page with some script in it that can grab the access token.&lt;br/&gt;

Hence my question: what has been gained here by skipping the client authentication step?

What is the purpose of the implicit grant authorization type in OAuth 2?

Could anyone explain what&#39;s good about OAuth2 and why we should implement it? I ask because I&#39;m a bit confused about it — here&#39;s my current thoughts:

OAuth1 (more precisely HMAC) requests seem logical, easy to understand, easy to develop and really, really secure.

OAuth2, instead, brings authorization requests, access tokens and refresh tokens, and you have to make 3 requests at the very start of a session to get the data you&#39;re after. And even then, one of your requests will eventually end up failing when the token expires.

And to get another access token, you use a refresh token that was passed at the same time as the access token. Does that make the access token futile from a security point of view? 

Plus, as /r/netsec have showed recently, SSL isn&#39;t all entirely secure, so the push to get everything onto TLS/SSL instead of a secure HMAC confuses me.

OAuth are arguing that it&#39;s not about 100% safety, but getting it published and finished. That doesn&#39;t exactly sound promising from a provider&#39;s point of view. I can see what the draft is trying to achieve when it mentions the 6 different flows, but it&#39;s just not fitting together in my head.

I think it might be more my struggling to understand it&#39;s benefits and reasoning than actually disliking it, so this may be a bit of an unwarranted attack, and sorry if this could seem like a rant.

OAuth 2.0: Benefits and use cases — why?

How to add a parameters to the Google OAuth 2.0 `redirect_uri`?

Just like this:

&gt; `redirect_uri=http://www.example.com/redirect.html?a=b`

The `b` of `a=b` is random.

Anyone can help ? 


Content Type	Original Author	Original Content on Stackoverflow
Question	agate	View Question on Stackoverflow
Solution 1 - node.js	Jared Hanson	View Answer on Stackoverflow
Solution 2 - node.js	Tauren	View Answer on Stackoverflow
Solution 3 - node.js	Alfred	View Answer on Stackoverflow
Solution 4 - node.js	KimKha	View Answer on Stackoverflow

Is there a Node OAuth Server Implementation

node.js Problem Overview

node.js Solutions

Solution 1 - node.js

Solution 2 - node.js

Solution 3 - node.js

Solution 4 - node.js

Create blurry transparent background effect

Two lines in h1 tag

Attributions