Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0 (Apple Message framework v1244.3)
Subject: Re: OAuth for authorization (not authentication)
From: Jan Lehnardt <jan@apache.org>
In-Reply-To: <4E25493B.9040907@yooook.net>
Date: Tue, 19 Jul 2011 11:20:34 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <4AED7DD6-0911-484B-8A8B-10C1A6FF62D7@apache.org>
References: <4E2433C8.3040200@yooook.net>
 <CABvT1DETV7VxK9_biM1WzC0BH6Y1-e=TNb4LQriiMSTFuWQyRw@mail.gmail.com>
 <4E25493B.9040907@yooook.net>
To: dev@couchdb.apache.org

Hi Camille,

The OAuth implementation in CouchDB is very limited (due
to constraints in the original development phase). The
implementation does not allow fine-grained token-based
access to specific contents of one or more databases
inside CouchDB, but only the authentication against a
CouchDB user in the CouchDB authentication layer. Once
a request is auth'd, there is no more OAuth machinery
inside CouchDB and you are left with CouchDB's security
mechanics:

  http://wiki.apache.org/couchdb/Security_Features_Overview
  =
http://blog.couchbase.com/whats-new-in-couchdb-1-0-part-4-securityn-stuff

Cheers
Jan
--=20


On 19 Jul 2011, at 11:07, Camille Harang wrote:

> Hi again,
>=20
> Le 18/07/2011 15:44, Robert Newson a =E9crit :
>> As also noted on IRC, you are indeed wrong,
>=20
> I hope I am, I really tried to find the proper way to fully implement
> OAuth authorization layer (tokens, ad hoc grant access in time and
> scope: the very essence of OAuth) within the CouchDB intrinsic
> techniques and philosophy, but I keep failing.
>=20
>> you just don't like the
>> granularity
>=20
> I don't dislike or like it, but wherever I look it just appears to me
> that there is just not enough of it to match the requirements of a
> proper implementation of OAuth. But I believe being wrong, I'm sure I
> am, I want to use Couch, can anyone point me the right direction? Once =
I
> know it, I will like it.
>=20
> Thanks,
>=20
> Cheers,
>=20
> Camille.
>=20
>=20
>> of the operation you are authorized to perform after
>> successfully authenticating. :)
>>=20
>> B.
>=20
> --=20
> The Good, the Bad and the Ugly under Creative Commons! =
https://yooook.net/r/lp1
>=20