Overview

The developed REST API should not be public. Each driver should only have access to its rides.

The single page application needs to access the rides on behalf of its user. To do that we will secure the app using the OAuth 2.0 framework.