I have some REST API endpoints that I want members to be able to consume from their own apps. I want access to these endpoints to be limited to specific groups of members.
The standard approach to this is to use an OAuth log-in flow. I can find old tools to do this like umbraco-authu
but searching through the forum history this seems to have changed in Umbraco 9+.
As far as I can gather this is now built-in to Umbraco, but I can't find any documentation to show where it is built-in or examples of how I can use it. I can see how it can be used in the back-end but I can't figure out how to use it for members.
To be absolutely clear:
- I am using Umbraco 10.
- I want to use Oauth to log in Members on the front end, not users in the back end.
- I want to use my Umbraco application as the membership provider, not a third party platform.
- I want users to be able to log in entirely through the API and retrieve a token they can use to authorise future API requests.
What do I need to do to get this working?