对于一个API请求,开发平台一般需要知道下面几件事情:
- 哪个应用发起这个请求(Which application is making the request)
- 这个请求是为哪个用户发起的(Which user the request is posting on behalf of)
- 用户是否对这个请求进行授权(Whether the user has granted the application authorization to post on the user's behalf)
- 请求是否在传输过程中被篡改(Whether the request has been tampered by a third party while in transit)