oltu-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Antonio Sanso <asa...@adobe.com>
Subject Re: Quickstart for Authorization Server (authzserver)
Date Mon, 25 Mar 2013 09:54:57 GMT
Hi Jerry

On Mar 21, 2013, at 11:40 PM, Jerry George wrote:


First of all, thanks to Stein and Antonio.

Could please provide me the auth registration from the life cycle flow "point of view" (RFC
6750). I would like a simple example to allow signed requests (for 2 legged auth) between
app, the authorization server, and resource server (which contains say some profile information).
Just to clarify as per the RFC 6750, could you please explain the roles involved in the request
signing process and API to do this.

RFC 6750 (Bearer Token) comes without any signature and leverages TLS/SSL for this.
May you be more specific on what you are trying to do ?



Also, I would like to know more about Token Endpoint's Validation for the authorization code,
apart from building an access token and refresh token (https://cwiki.apache.org/confluence/display/OLTU/OAuth+2.0+Authorization+Server)

I see some examples here, https://github.com/hasanozgan/apache-oltu-oauth2-provider-demo/blob/master/src/main/java/com/bilyoner/api/endpoints/TokenEndpoint.java

Could anyone please clarify briefly?


On Thu, Mar 21, 2013 at 5:14 AM, Stein Welberg <stein@innovation-district.com<mailto:stein@innovation-district.com>>
Hi Jerry,

I have created an Authorization Server implementation based on Oltu. You can ask me questions
about it.

I agree with Antonio that we should improve the examples and documentation. Personally I'm
currently working on getting Oltu compliant with the OAuth spec. But as soon as that is finished
I'll see what I can do.


On 21 mrt. 2013, at 10:04, Antonio Sanso <asanso@adobe.com<mailto:asanso@adobe.com>>

> Hi Jerry,
> I do agree it would be nice to have some deeper examples.
> As you might now we have been transitioning from Amber incubator to Apache Oltu.
> One of my personal goal is to improve the documentation and the java doc API.
> For the moment you might find something in [0].
> Regards
> Antonio
> [0] https://cwiki.apache.org/confluence/display/OLTU/Documentation
> On Mar 21, 2013, at 4:17 AM, Jerry George wrote:
>> Hi,
>> I do see some examples as part of main revision from the SVN. Would anyone have some
extra samples or worked out code for full lifecycle of the request and response (with issuer
>> Thanks you.

View raw message