API service 安全问题
这是一个长期关注的课题
rest api Service的安全
比如jsonp怎么是安全的
算是阅读目录吧：
http://hueniverse.com/2010/05/introducing-oauth-2-0/
http://guides.rubyonrails.org/security.html
http://xaop.com/blog/2010/03/05/authentication-with-oauth-in-ruby-on-rails/
https://github.com/intridea/oauth2
https://github.com/songkick/oauth2-provider
https://github.com/freerange/oauth2-provider
https://github.com/socialcast/devise_oauth2_providabl
https://github.com/flowtown/rack-oauth2-server
https://github.com/pelle/oauth-plugin
https://github.com/applicake/doorkeeper
http://doorkeeper-provider.herokuapp.com/
