CWSToken Class Reference

Detailed Description

An Access Token refers to a tuple with information that is held by NCIM. The token binds an authenticated Nokia Account user session to a consumer and a service. An access token is presented by a consumer when it invokes a service. The service in turn dereferences the token at NCIM to obtain information about the authenticated user, the associated consumer key and the associated Token Secret. The token itself is not secret, and on its own should not be sufficient for resource access. Only if a consumer proves to have possession of the associated secret (e.g. messages are signed or encrypted by the secret) should Services consider granting access. Of course services may impose additional, service and user specific, conditions to resource access.