NAME

Plack::Middleware::Auth::OAuth - OAuth signature validation middleware

SYNOPSIS

use Plack::Builder;

my $app = sub { ...};

builder {
    enable "Plack::Middleware::Auth::OAuth",
        consumer_key => 'YOUR_CONSUMER_KEY',
        consumer_secret => 'YOUR_CONSUMER_SECRET',
        validate_post   => 1,
        ;
    $app;
};

DESCRIPTION

Plack::Middleware::Auth::OAuth is OAuth signature validation handler for Plack.

CONFIGURATION

consumer_key

Your application's consumer key.

consumer_secret

Your application's consumer secret.

validate_post

Includes body parameters in validation. For MBGA-Town, you should use this option.

check_nonce_cb

A callback function to validate oauth_nonce.

check_timestamp_cb

A callback function to validate oauth_timestamp.

unauthorized_cb

A callback function (psgi application) for returning custom response when unauthorized.

validate_only

doing only validation. not returning response directly from middleware (unauthorized method not to be called).

discriminating authorization is valid or not by seeing $env->{'psgix.oauth_authorized'} in your app.

secret_resolver_cb

A callback function for resolving consumer_secret. This callback takes argument: ($consumer_key, $env).

strict

Default: 0

if true, it judge unsupported parameter as invalid when validating parameters. if false, it accepts unsupported parameters.

AUTHOR

Hideo Kimura <hide@cpan.org> Masayuki Matsuki <songmu@cpan.org>

SEE ALSO

LICENSE

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.