Developing OAuth 1.0 Servers

OAuth server is the core piece of the complete OAuth-based solution. Typically it contains 3 services for:

Initiating the flows by issuing temporarily tokens to consumers
Authorizing request tokens by asking the end users to let consumers access some of their resources and returning the
confirmation back to the consumer
Exchanging authorized request tokens for access tokens

CXF offers 3 JAX-RS service implementations that can be used to create OAuth 1.0 servers fast: RequestTokenService, AuthorizationRequestService and AccessTokenService.

All of these 3 services rely on the custom OAuthDataProvider which manages request and access tokens. Writing your own OAuthDataProvider implementations is what is needed to get the OAuth server up and running.

RequestTokenService

The main responsibility of RequestTokenService is to create a temporarily request token and return it back to the consumer. It supports POST and GET requests and returns a form payload containing the new request token and its secret.

Here is an example request log:

+

Developing OAuth 1.0 Servers

OAuth server is the core piece of the complete OAuth-based solution. Typically it contains 3 services for:

Initiating the flows by issuing temporarily tokens to consumers
Authorizing request tokens by asking the end users to let consumers access some of their resources and returning the
confirmation back to the consumer
Exchanging authorized request tokens for access tokens

CXF offers 3 JAX-RS service implementations that can be used to create OAuth 1.0 servers fast: RequestTokenService, AuthorizationRequestService and AccessTokenService.

All of these 3 services rely on the custom OAuthDataProvider which manages request and access tokens. Writing your own OAuthDataProvider implementations is what is needed to get the OAuth server up and running.

RequestTokenService

The main responsibility of RequestTokenService is to create a temporarily request token and return it back to the consumer. It supports POST and GET requests and returns a form payload containing the new request token and its secret.

Here is an example request log:

Address: http://localhost:8080/services/oauth/initiate
 Encoding: ISO-8859-1
 Http-Method: POST