I have a restful API that I built using node.js and node-restify. I am up to the part where I have to secure it. Apparently, it is easy to find out how to use OAuth 2.0 as a client but hard to find out how to set up a provider. I guess my google skills aren't as good as they used to be. I have a restful API that I built using node.js