I agree with Pid completely, let's wait for someone from Shiro to comment. I suppose that every Apache project having a mechanism of resource authorization has (or should have) in its road map to support OAuth, and being Shiro a framework explicitly targeted at security it is obvious they have OAuth high in their priority list. In the case Shiro decides to wait for Amber to provide an OAuth implementation, it will then be a matter of creating the glue code to provide integration in Amber or in Shiro.
However there have been many previous examples of two different implementations of the same thing in open source in general and in Apache as well (for example, many projects are currently implementing their security system, but still they could use Shiro, or Amber). It's not a matter of wasting resources, there can be many other factors like technical difficulties, OAuth being a "strategic asset", or simply have already an infrastructure in place that can be leveraged faster than waiting for a generic implementation and then integrate it. Having another implementation already in place or on roadmap/underway is not a show-stopper for creating a more generic and embeddable one. Simone 2010/5/1 Pid <p...@pidster.com> > On 30/04/2010 19:13, Paul Lindner wrote: > > Is there any chance that Amber could provide the OAuth plumbing for > Shiro? > > I'd hope so, but I'd be interested to hear any Shiro committers thoughts? > > > We think there's enough Apache projects with plans for, (or existing > v1.0), OAuth implementations that it makes sense for Apache to house a > single library to service that requirement. > > There'd be a group of developers dedicated to working on and supporting > OAuth, which has benefits over each project attempting it's own > implementation. > > From the interest in the project so far we hope that it'll get a good > amount of use in high demand sites fairly quickly which will help us > iron out any problems and build experience which we'll be able to > contribute back to other projects and external Amber users. > > > p > > > > On Apr 30, 2010, at 10:46 AM, Les Hazlewood wrote: > > > >> OAuth 2 support (client + server) is on the roadmap for Apache Shiro. > >> Does this mean we could have potentially 2 Apache implementations? > >> (Fine by me if necessary - let a million flowers bloom and all that > >> ;)). Just curious... > >> > >> Les > >> > >> On Fri, Apr 30, 2010 at 10:17 AM, Alan D. Cabrera <a...@toolazydogs.com> > wrote: > >>> Very interesting. You may want to ping the Shiro project. They may be > >>> interested in this as well. > >>> > >>> > >>> Regards, > >>> Alan > >>> > >>> On Apr 29, 2010, at 2:45 AM, Paul Lindner wrote: > >>> > >>>> The Shindig PMC has approved the proposal to sponsor the Amber project > for > >>>> the Apache Incubator. > >>>> > >>>> 7 +1 votes were submitted. [Henning, Chirag, Chico, Paul, Jacky, > Santiago > >>>> and Vincent] > >>>> No 0 or -1 votes. > >>>> > >>>> Thanks > >>>> Paul > >>>> > >>>> On Tue, Apr 27, 2010 at 5:54 AM, Paul Lindner <plind...@linkedin.com> > >>>> wrote: > >>>> > >>>>> Hi, > >>>>> > >>>>> I propose that the Shindig PMC sponsor the Amber project - which is > an > >>>>> OAuth 1.0/2.0 library under development in Apache Labs. > >>>>> > >>>>> http://wiki.apache.org/incubator/AmberProposal > >>>>> > >>>>> Our sponsorship would allow Amber to graduate to the Apache > >>>>> incubator. After some time it could graduate to a subproject of > Shindig > >>>>> or > >>>>> as a top level project of it's own. > >>>>> > >>>>> Vote open for 72h > >>>>> > >>>>> +1 Sponsor Amber > >>>>> +0 no opinion > >>>>> -1 Don't sponsor Amber > >>>>> > >>> > >>> > >>> --------------------------------------------------------------------- > >>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > >>> For additional commands, e-mail: general-h...@incubator.apache.org > >>> > >>> > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > >> For additional commands, e-mail: general-h...@incubator.apache.org > >> > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > >
