Return-Path: X-Original-To: apmail-cxf-issues-archive@www.apache.org Delivered-To: apmail-cxf-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 2A7B410932 for ; Fri, 26 Jul 2013 14:23:50 +0000 (UTC) Received: (qmail 20202 invoked by uid 500); 26 Jul 2013 14:23:50 -0000 Delivered-To: apmail-cxf-issues-archive@cxf.apache.org Received: (qmail 20069 invoked by uid 500); 26 Jul 2013 14:23:49 -0000 Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cxf.apache.org Delivered-To: mailing list issues@cxf.apache.org Received: (qmail 20058 invoked by uid 99); 26 Jul 2013 14:23:48 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 26 Jul 2013 14:23:48 +0000 Date: Fri, 26 Jul 2013 14:23:48 +0000 (UTC) From: "Sergey Beryozkin (JIRA)" To: issues@cxf.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (CXF-5162) OAuth2 AccessTokenService should validate if Client supports a given grant MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CXF-5162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13720826#comment-13720826 ] Sergey Beryozkin commented on CXF-5162: --------------------------------------- http://svn.apache.org/r1507319 > OAuth2 AccessTokenService should validate if Client supports a given grant > -------------------------------------------------------------------------- > > Key: CXF-5162 > URL: https://issues.apache.org/jira/browse/CXF-5162 > Project: CXF > Issue Type: Improvement > Components: JAX-RS Security > Reporter: Sergey Beryozkin > Assignee: Sergey Beryozkin > > This is what AccessTokenService can do itself without the custom handlers having to deal with it themselves. The handlers would still be able to do some additional checks if really needed - but what AbstractTokenHandler does now can actually be done by the service itself - this will marginally simplify the custom implementations too. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira