goa has built-in support for multiple security schemes: basic auth, API key (a.k.a. shared secret), JWT and OAuth2. Security schemes can be attached to the entire API, a resource or a single action. Actions that have security scheme(s) attached to them require clients to perform authentication as described by the scheme(s). Individual actions may also override the need for doing auth.
Security DSL A security scheme is defined using one of BasicAuthSecurity, APIKeySecurity, JWTSecurity or OAuth2Security.
↧