{"action":"created","issue":{"url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/453","labels_url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/453/labels{/name}","comments_url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/453/comments","events_url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/453/events","html_url":"https://github.com/simplabs/ember-simple-auth/pull/453","id":59092835,"number":453,"title":"add section about an authorizer to the readme","user":{"login":"albertjan","id":301791,"avatar_url":"https://avatars.githubusercontent.com/u/301791?v=3","gravatar_id":"","url":"https://api.github.com/users/albertjan","html_url":"https://github.com/albertjan","followers_url":"https://api.github.com/users/albertjan/followers","following_url":"https://api.github.com/users/albertjan/following{/other_user}","gists_url":"https://api.github.com/users/albertjan/gists{/gist_id}","starred_url":"https://api.github.com/users/albertjan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/albertjan/subscriptions","organizations_url":"https://api.github.com/users/albertjan/orgs","repos_url":"https://api.github.com/users/albertjan/repos","events_url":"https://api.github.com/users/albertjan/events{/privacy}","received_events_url":"https://api.github.com/users/albertjan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-26T15:57:38Z","updated_at":"2015-03-05T09:19:24Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/simplabs/ember-simple-auth/pulls/453","html_url":"https://github.com/simplabs/ember-simple-auth/pull/453","diff_url":"https://github.com/simplabs/ember-simple-auth/pull/453.diff","patch_url":"https://github.com/simplabs/ember-simple-auth/pull/453.patch"},"body":"as talked about in #452 "},"comment":{"url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/comments/77331057","html_url":"https://github.com/simplabs/ember-simple-auth/pull/453#issuecomment-77331057","issue_url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/453","id":77331057,"user":{"login":"marcoow","id":1510,"avatar_url":"https://avatars.githubusercontent.com/u/1510?v=3","gravatar_id":"","url":"https://api.github.com/users/marcoow","html_url":"https://github.com/marcoow","followers_url":"https://api.github.com/users/marcoow/followers","following_url":"https://api.github.com/users/marcoow/following{/other_user}","gists_url":"https://api.github.com/users/marcoow/gists{/gist_id}","starred_url":"https://api.github.com/users/marcoow/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcoow/subscriptions","organizations_url":"https://api.github.com/users/marcoow/orgs","repos_url":"https://api.github.com/users/marcoow/repos","events_url":"https://api.github.com/users/marcoow/events{/privacy}","received_events_url":"https://api.github.com/users/marcoow/received_events","type":"User","site_admin":false},"created_at":"2015-03-05T09:19:24Z","updated_at":"2015-03-05T09:19:24Z","body":"I think the section you're adding is a little misleading. Authenticators and authorizers are somewhat bound together as the authorizer depends on data acquired by the authenticator. That's why e.g. the OAuth 2.0 authorizer doesn't work (while actually it might work but that would be coincidence) when using a torii authenticator as that acquires different data than the OAuth 2.0 authorizer expects.\r\n\r\nAlso, for torii that's especially difficult as even the torii authenticator doesn't know which data is acquired as that's specific for the actual torii provider it uses.\r\n\r\nThird, the authorization mechanism your app uses isn't necessarily bound to the authentication mechanism (which could actually be many). So maybe you support Facebook, Google and Twitter authentication via torii and use your own authorization header that you inject into requests, meaning there is no one _\"correct\"_ torii authorizer.\r\n\r\nSo instead of adding the suggested session, I'd add sth, that simply says that there is no authorizer in the torii extension library but you need to implement your own depending on your authorization mechanism and that that authorizer must be able to handle the different types of authentication data the torii providers you're using acquire."}}