Adrien Joly

https://github.com/ianstormtaylor/permit could be used to create a OAuth proxy to the existing API maybe?

Thanks for asking, Brandon! I think that you will find answers to your question in [our roadmap](https://github.com/openwhyd/openwhyd/blob/master/docs/ROADMAP.md). If there's anything missing and/or not clear enough, please let me know :-)

Hi Brandon, sorry for the delay. I don't mind adding another technology, as long as it can still run comfortably on our current $15/month droplet (with 3 GB of RAM),...

Sure, I'll try to do this tonight, after work.

Hi @uLan08 ! I explained the login flow in the following file: [`/docs/login-flow.md`](https://github.com/openwhyd/openwhyd/blob/master/docs/login-flow.md). I'm not experienced with the back-end of OAuth, but I think that the cleanest and safest way...

Hi Patrick! Are you still motivated to propose a solution to this issue? Let me know if I can help in any way!

No worries, I was just checking if I could help ^^ Have a great weekend!

If any of you are based in Paris and available tonight, I propose that we work on this topic during the "hackergarten" meetup: https://www.meetup.com/fr-FR/Paris-Hackergarten/events/tvdrwpyxpbkc/

Other possible solution: "Grant: OAuth Middleware for Express, Koa and Hapi" (https://github.com/simov/grant)

[A crash course on securing Serverless APIs with JSON web tokens](https://medium.freecodecamp.org/a-crash-course-on-securing-serverless-apis-with-json-web-tokens-ff657ab2f5a5)