API service 安全问题

这是一个长期关注的课题

rest api Service的安全
比如jsonp怎么是安全的

算是阅读目录吧：

http://hueniverse.com/2010/05/introducing-oauth-2-0/
http://guides.rubyonrails.org/security.html
http://xaop.com/blog/2010/03/05/authentication-with-oauth-in-ruby-on-rails/

https://github.com/intridea/oauth2
https://github.com/songkick/oauth2-provider
https://github.com/freerange/oauth2-provider
https://github.com/socialcast/devise_oauth2_providabl
https://github.com/flowtown/rack-oauth2-server
https://github.com/pelle/oauth-plugin
https://github.com/applicake/doorkeeper
http://doorkeeper-provider.herokuapp.com/