Pages

Monday, June 21, 2010

Apache CXF + OAuth, first stage completed

OAuth support for Apache CXF reached first important level. Current version implements first authorization server endpoint called: Temporary Credential Request. This endpoint (implemented as JAX-RS service) is able to produce a set of temporary credentials according to OAuth 1.0a specification.  There is still some things that needs to be improved, but current solution almost completely covers specification.

In next steps of development I will add next services that acts as:
  • Resource Owner Authorization endpoint - to which the resource owner is redirected to grant authorization
  • Token Request endpoint - used by the client to request a set of token credentials using the set of temporary credentials
Consulting first with Apache CXF community that always gives helpful hand and great advices.
You can follow all changes at: https://svn.apache.org/repos/asf/cxf/sandbox/oauth_1.0a/rt/rs/oauth/

Comments, feedback and ideas are really welcome.

No comments:

Post a Comment