title: Authentication and Authorization of HTTP API in Play Framework
body: <p>I am building an API using the Scala version of the play framework. Some of the endpoints will contain confidential data but I am not sure how exactly to secure this.</p>
  
  <p>Secure social (<a href="http://securesocial.ws/guide/configuration.html" rel="nofollow">http://securesocial.ws/guide/configuration.html</a>) is a library that I've been looking at but it seems oriented around websites and logging in with OAuth providers. </p>
  
  <p>In this case it seems like I need to be an OAuth provider. Or is it possible that I can allow users to login with a provider, say Twitter? But then how would that work? The documentation around OAuth seems to be incredibly awful.</p>