Sergey Beryozkin created CXF-5557:
-------------------------------------
Summary: Convert MacAccessToken to HawkAccessToken
Key: CXF-5557
URL: https://issues.apache.org/jira/browse/CXF-5557
Project: CXF
Issue Type: Improvement
Components: JAX-RS, JAX-RS Security
Reporter: Sergey Beryozkin
Assignee: Sergey Beryozkin
Fix For: 3.0.0-milestone2
CXF OAuth2 module implements the following draft:
https://tools.ietf.org/html/draft-hammer-oauth-v2-mac-token-05
which has been replaced, in scope of OAuth2, by
http://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-05
which takes a different approach toward it; the CXF MacAccessToken is kind of
suspended in the air - dropping it does seem like a good idea while the new
OAuth2 effort is still under way.
https://github.com/hueniverse/hawk/blob/master/README.md
is the evolution of
https://tools.ietf.org/html/draft-hammer-oauth-v2-mac-token-05
and as it happens CXF MacAuthorizationScheme implements Hawk one too one,
except for it does not support new Hawk extensions, and the optional in/out
payload validation.
Supporting Hawk is a better alternative to seeing CXF MacAccessToken getting
out of use.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
