lepture/authlib

Protect Resources
=================

Protect users resources, so that only the authorized clients with the
authorized access token can access the given scope resources.

A resource server can be a different server other than the authorization
server. Here is the way to protect your users' resources::

    from django.http import JsonResponse
    from authlib.integrations.django_oauth1 import ResourceProtector
    require_oauth = ResourceProtector(Client, TokenCredential)

    @require_oauth()
    def user_api(request):
        user = request.oauth1_credential.user
        return JsonResponse(dict(username=user.username))

The ``require_oauth`` decorator will add a ``oauth1_credential`` to ``request``
parameter. This ``oauth1_credential`` is an instance of the Token model.