Germany-based open-source file syncing and sharing software company ownCloud has added secure authentication and authorisation to its functions with the integration of OAuth2.
An open industrial standard, OAuth2 offers a secure and simplified login process for ownCloud clients and also a higher level of security when embedding ownCloud into third-party applications and Web services.
The integration means there is no need to store passwords in ownCloud desktop clients or ownCloud mobile apps for iOS and Android. The clients are authenticated in a Web browser by entering a username and password.
The corresponding client gets a unique access token which, together with the OAuth2 protocol, authorises the login.
{loadposition sam08}A statement from ownCloud said the use of different access tokens for each client allowed users to end their sessions selectively.
"Because the access token is generated for each device and each application individually, users can check their authorised clients in their personal settings and revoke individual tokens," it said.
"This comes in handy, especially when a device has been lost. The user now has more control and can simultaneously raise the access security."