Pages

Saturday, June 19, 2010

Apache CXF + OAuth = secret services

This summer I participate in Google Summer of Code 2010 working with Apache Software Foundation. Many thanks for Google for that program as it's great opportunity for students to start open source adventure.

My project idea(described in details:
http://socghop.appspot.com/gsoc/student_project/show/google/gsoc2010/apache/t127230759579)
aims on developing Apache CXF module that allows to secure RESTful services with OAuth (version 1.0a).

I have started already development, current stage:
https://svn.apache.org/repos/asf/cxf/sandbox/oauth_1.0a/rt/rs/oauth/

I base on OAuth 1.0a specification: http://tools.ietf.org/html/rfc5849
and use OAuth library: http://code.google.com/p/oauth/ that helps developers create OAuth consumer and providers.

If you are interested in this project you can follow it this blog, I will update it with some after some main steps.

2 comments:

  1. Hi Lukasz, I'm looking to reuse what you have done here to integrate REST/CXF with Oauth and I'd like to peek at the code of the server and client applications. However I can find them anywhere in ASF SVN repository. The CXF documention wiki refers to them to but there is nothing more. I'd like to see an actual example. Hence my asking. Any help you could provide would be greatly appreciated.

    -Martin

    ReplyDelete
  2. Hi Martin,

    You can find documentation for my work here: http://cxf.apache.org/docs/cxf-oauth-10.html and here you have https://svn.apache.org/repos/asf/cxf/sandbox/oauth_1.0a/rt/rs/oauth/
    sourc code. There are examples of oauth client and oauth server that you can find http://blog.socialmate.pl/2010/07/oauth-10a-client-and-server-examples.html .

    If you are building OAuth endpoints you may want to consider using Apache Amber (https://cwiki.apache.org/confluence/display/AMBER/Index) that supports newest OAuth 2.0 specification and can be integrated with Apache CXF as well.

    Cheers,
    Lukasz

    ReplyDelete