How to set API Key and API Secret to clients?

[weierophinney]

I want to use Apigility to create an API that several clients will consume. What I need to do is something like Facebook does: people can create apps that connects to my API, and I can see what apps are connected.

Also I would like to be able to limit services for some apps. Something like app A can online view statuses, App B can view and post and edit statuses, App C can only edit statuses for examples.

Is that possible with apigility? Where can I find documentation for the API Keys and Secret?

In other words I want application based authorization instead of user based authorization that Oauth2 does.

---

Originally posted by @backstageel at zfcampus/zf-apigility#165

[weierophinney]

I have the same question

---

Originally posted by @strausmann at zfcampus/zf-apigility#165 (comment)

[weierophinney]

There is a client_credentials grant type in OAuth2. If you're asking about scopes I think my api-skeletons/zf-oauth2-doctrine supports them best.

---

Originally posted by @TomHAnderson at zfcampus/zf-apigility#165 (comment)