oltu-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hofer, Filip" <filip.ho...@atos.net>
Subject RE: OpenID Connect Support
Date Thu, 15 May 2014 09:34:27 GMT
Hi Mark,

Code snippets would be welcome.

Many thanks in advance

   Filip Hofer

From: Mark Rose (ARC-TI)[Stinger Ghaffarian Technologies Inc. (SGT Inc.)] [mailto:mark.rose@nasa.gov]
Sent: Wednesday, May 14, 2014 12:14 AM
To: <user@oltu.apache.org>
Subject: Re: OpenID Connect Support

On May 13, 2014, at 12:43 PM, Antonio Sanso wrote:

I would like to ask what is the status of OpenID Connect support in Oltu. Is it already possible
to build Oltu-based IDPs and RPs?

So for OIDC I am afraid the answer is no. It would be yes for plain OAuth 2.

I have been able to implement an OIDC connect RP with Google as the IDP by using OpenID Connect
scopes, extracting the ID token as an attribute from the response of the token endpoint, and
then using the JWT classes to parse the ID token. So I've been able to use Oltu to do the
authentication, but have not used the OpenID Connect Oltu classes.

If you're interested, I can send some code snippets. (I wrote some classes to hide whether
OAuth or OpenID connect is used and parameterize the scopes and some endpoints, so that we
can use IDPs that don't yet support OpenID Connect or discovery. I can't release all of that
code, but I can send enough to give you the info.)

Mark Rose

NASA Ames Research Center / Dell Federal Services

View raw message