How to set API Key and API Secret to clients?

[backstageel]

I want to use Apigility to create an API that several clients will consume. What I need to do is something like Facebook does: people can create apps that connects to my API, and I can see what apps are connected.

Also I would like to be able to limit services for some apps. Something like app A can online view statuses, App B can view and post and edit statuses, App C can only edit statuses for examples.

Is that possible with apigility? Where can I find documentation for the API Keys and Secret?

In other words I want application based authorization instead of user based authorization that Oauth2 does.

[strausmann]

I have the same question

[TomHAnderson]

There is a client_credentials grant type in OAuth2. If you're asking about scopes I think my api-skeletons/zf-oauth2-doctrine supports them best.

[weierophinney]

This repository has been closed and moved to laminas-api-tools/api-tools; a new issue has been opened at laminas-api-tools/api-tools#26.