Re: Oauth with CAS Jasig

2013-03-20 Thread A Clarke
Hi Alexandre, You should try tracing with FINEST, at least for org.apache.shindig.gadgets.oauth2.* and org.apache.shindig.gadgets.servlet.OAuth2CallbackServlet Your exception is strange to me ... org.apache.shindig.social.core.oauth2.OAuth2Exception , that's coming from the OAuth2 provider. If

Re: Review Request: Code Review for JIRA 1801, shared tokens should share accessors

2012-09-25 Thread Adam Clarke
--- All unit tests pass Thanks, Adam Clarke

Re: Review Request: Latest (and probably last) iteration of OAuth2 Consumer fixes rolled up into a single patch.

2012-09-17 Thread Adam Clarke
/oauth2/handler/OAuth2HandlerErrorTest.java 1386626 Diff: https://reviews.apache.org/r/6436/diff/ Testing --- All existing JUnits pass Thanks, Adam Clarke

Re: Review Request: Latest (and probably last) iteration of OAuth2 Consumer fixes rolled up into a single patch.

2012-09-17 Thread Adam Clarke
it here? I just don't want to forget about it. - superddumont On Sept. 17, 2012, 2:41 p.m., Adam Clarke wrote: --- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/6436

Re: Review Request: Latest (and probably last) iteration of OAuth2 Consumer fixes rolled up into a single patch.

2012-09-07 Thread Adam Clarke
/OAuth2HandlerErrorTest.java 1382074 Diff: https://reviews.apache.org/r/6436/diff/ Testing --- All existing JUnits pass Thanks, Adam Clarke

Re: Review Request: Latest (and probably last) iteration of OAuth2 Consumer fixes rolled up into a single patch.

2012-08-24 Thread Adam Clarke
/src/test/java/org/apache/shindig/gadgets/oauth2/handler/OAuth2HandlerErrorTest.java 1376889 Diff: https://reviews.apache.org/r/6436/diff/ Testing --- All existing JUnits pass Thanks, Adam Clarke

Re: Review Request: Latest (and probably last) iteration of OAuth2 Consumer fixes rolled up into a single patch.

2012-08-24 Thread Adam Clarke
--- On Aug. 24, 2012, 1:04 p.m., Adam Clarke wrote: --- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/6436

Re: Review Request: Latest (and probably last) iteration of OAuth2 Consumer fixes rolled up into a single patch.

2012-08-24 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/6436/#review10425 --- On Aug. 24, 2012, 1:04 p.m., Adam Clarke wrote: --- This is an automatically

Re: Review Request: Latest (and probably last) iteration of OAuth2 Consumer fixes rolled up into a single patch.

2012-08-13 Thread Adam Clarke
/oauth2/handler/OAuth2HandlerErrorTest.java 1372387 Diff: https://reviews.apache.org/r/6436/diff/ Testing --- All existing JUnits pass Thanks, Adam Clarke

Re: Review Request: Latest (and probably last) iteration of OAuth2 Consumer fixes rolled up into a single patch.

2012-08-13 Thread Adam Clarke
generated e-mail. To reply, visit: https://reviews.apache.org/r/6436/#review10023 --- On Aug. 13, 2012, 12:33 p.m., Adam Clarke wrote: --- This is an automatically generated e-mail

Review Request: OAuth1.0a , Make oauth_body_hash optional and support PLAINTEXT

2012-07-18 Thread Adam Clarke
/OAuthRequest.java 1363028 http://svn.apache.org/repos/asf/shindig/trunk/java/gadgets/src/main/java/org/apache/shindig/gadgets/oauth/OAuthStore.java 1363028 Diff: https://reviews.apache.org/r/6035/diff/ Testing --- All JUnits pass. Thanks, Adam Clarke

Re: Review Request: Additional OAuth2 Logging Filters

2012-06-29 Thread Adam Clarke
/FilteredLoggerTest.java 1355349 Diff: https://reviews.apache.org/r/5592/diff/ Testing --- all units pass Thanks, Adam Clarke

Re: Review Request: OAuth2TokenPersistence setSecret fails if no encrypter

2012-06-27 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/5497/#review8650 --- Ship it! Ship It! - Adam Clarke On June 26, 2012, 8:33 p.m

Re: Review Request: Additional OAuth2 Logging Filters

2012-06-27 Thread Adam Clarke
Diffs (updated) - http://svn.apache.org/repos/asf/shindig/trunk/java/gadgets/src/main/java/org/apache/shindig/gadgets/oauth2/logger/FilteredLogger.java 1354123 Diff: https://reviews.apache.org/r/5592/diff/ Testing --- all units pass Thanks, Adam Clarke

Review Request: Additional OAuth2 Logging Filters

2012-06-26 Thread Adam Clarke
/main/java/org/apache/shindig/gadgets/oauth2/logger/FilteredLogger.java 1354123 Diff: https://reviews.apache.org/r/5592/diff/ Testing --- all units pass Thanks, Adam Clarke

Re: Review Request: Code Review for JIRA 1801, shared tokens should share accessors

2012-06-22 Thread Adam Clarke
://svn.apache.org/repos/asf/shindig/trunk/java/gadgets/src/main/java/org/apache/shindig/gadgets/oauth2/BasicOAuth2Store.java 1352576 Diff: https://reviews.apache.org/r/5420/diff/ Testing --- All unit tests pass Thanks, Adam Clarke

Re: Adding additional APIs to Shindig

2012-06-22 Thread A Clarke
implements several OpenSocial APIs: OpenSocial REST: for server to server communication OpenSocial JSON-RPC: for gadget to server communication Javascript: for gadgets Having to generate a security token to make this request isn't feeling quite right. doug On 6/21/12 3:52 PM, A Clarke cla

Re: Review Request: Code Review for JIRA 1801, shared tokens should share accessors

2012-06-21 Thread Adam Clarke
(updated) - http://svn.apache.org/repos/asf/shindig/trunk/java/gadgets/src/main/java/org/apache/shindig/gadgets/oauth2/BasicOAuth2Store.java 1352576 Diff: https://reviews.apache.org/r/5420/diff/ Testing --- All unit tests pass Thanks, Adam Clarke

Re: Review Request: Code Review for JIRA 1801, shared tokens should share accessors

2012-06-21 Thread Adam Clarke
: https://reviews.apache.org/r/5420/#review8387 --- On June 21, 2012, 3:53 p.m., Adam Clarke wrote: --- This is an automatically generated e-mail. To reply, visit: https

Re: Review Request: Code Review for JIRA 1801, shared tokens should share accessors

2012-06-21 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/5420/#review8395 --- On June 21, 2012, 3:53 p.m., Adam Clarke wrote: --- This is an automatically

Re: Review Request: Code Review for JIRA 1801, shared tokens should share accessors

2012-06-21 Thread Adam Clarke
/shindig/trunk/java/gadgets/src/main/java/org/apache/shindig/gadgets/oauth2/BasicOAuth2Store.java 1352576 Diff: https://reviews.apache.org/r/5420/diff/ Testing --- All unit tests pass Thanks, Adam Clarke

Re: Adding additional APIs to Shindig

2012-06-21 Thread A Clarke
Generally speaking there was nothing done to address the management of gadget bindings and clients externally. On Thu, Jun 21, 2012 at 2:38 PM, Matthew G Marum mgma...@us.ibm.com wrote: Client Credentials flow was implemented in OAuth 2.0 service provider and the OAuth 2.0 consumer within

Re: Review Request: OAuth2TokenPersistence setSecret fails if no encrypter

2012-06-21 Thread Adam Clarke
set the encrypted secret to be the unencrypted secret that was passed in. The persistence layer should be storing the encrypted secret, so if that was null the information would be lost. - Adam Clarke On June 21, 2012, 6:03 p.m., Brian Lillie wrote

Review Request: Code Review for JIRA 1801, shared tokens should share accessors

2012-06-19 Thread Adam Clarke
/gadgets/src/main/java/org/apache/shindig/gadgets/oauth2/BasicOAuth2Store.java 1351704 Diff: https://reviews.apache.org/r/5420/diff/ Testing --- All unit tests pass Thanks, Adam Clarke

Review Request: Code Review for JIRA 1793, expose OAuth2 client invalidation on OAuth2Store

2012-06-19 Thread Adam Clarke
/OAuth2Store.java 1346021 Diff: https://reviews.apache.org/r/5419/diff/ Testing --- All unit tests pass Thanks, Adam Clarke

Re: OAuth2 token expiration and issue times broken

2012-06-12 Thread A Clarke
Looks like I forgot to update the interface javadoc. The intention is to use milliseconds now, this made it easier for other teams to persist and compare values as timestamps. On Tue, Jun 12, 2012 at 8:23 AM, Ryan J Baxter rjbax...@us.ibm.com wrote: Doug, this was intentional I believe,

Re: OAuth2 token expiration and issue times broken

2012-06-12 Thread A Clarke
Yes. On Tue, Jun 12, 2012 at 9:36 AM, Ryan J Baxter rjbax...@us.ibm.com wrote: Adam is it just the javadoc for OAuth2Token.getIssueAt and OAuth2Token.getExpiresAt that needs to be updated? -Ryan From: A Clarke cla...@gmail.com To: dev@shindig.apache.org, Date: 06/12/2012 09

Re: Review Request: Jira 1732 and lots of other fixes/enhancements

2012-06-04 Thread A Clarke
://reviews.apache.org/r/4947/#review7754 --- Ship it! Committed revision 1336461 Please close the review. - Stanton On 2012-05-04 14:31:05, Adam Clarke wrote

Review Request: Per latest OAuth2 spec, handle 400 from refresh_token response

2012-06-01 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/5330/ --- Review request for shindig and Stanton Sievers. Summary --- Spec did

Re: Securing Oauth 1 secrets

2012-05-22 Thread A Clarke
Mike, Your OAuthStore is responsible for encrypting/decrypting the secrets. The OAuth2Encrypter interface is there because of the lessons learned from writing custom OAuth 1 stores. On Tue, May 22, 2012 at 2:43 PM, Michael Matthews matth...@oclc.org wrote: I'm adding an OAuth 1.0 OAuthStore

Re: Review Request: pass User-Agent header on makeRequest

2012-05-21 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/5162/ --- (Updated 2012-05-21 13:27:18.757970) Review request for shindig. Changes

Re: Review Request: Jira 1732 and lots of other fixes/enhancements

2012-05-04 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/4947/ --- (Updated 2012-05-04 14:31:05.271804) Review request for shindig, Ryan Baxter

Re: Review Request: Jira 1732 and lots of other fixes/enhancements

2012-05-01 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/4947/ --- (Updated 2012-05-01 15:12:43.842304) Review request for shindig, Ryan Baxter

Re: oauth2 dance

2012-04-26 Thread A Clarke
Doug, There's three options you can try out easily, none of these worked for us so we did option 4 and extended the OAuth2 Consumer and Provider to seamlessly suppress the dance. 1) Client Credentials. The authorization code flow hinges on the dance occuring, but client credentials works

Re: Review Request: Share OAuth2Token for a user across multiple gadgets

2012-04-11 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/4291/ --- (Updated 2012-04-11 14:55:54.729162) Review request for shindig, Ryan Baxter

Re: Review Request: Share OAuth2Token for a user across multiple gadgets

2012-04-10 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/4291/ --- (Updated 2012-04-10 15:00:53.484791) Review request for shindig, Ryan Baxter

Re: Review Request: Share OAuth2Token for a user across multiple gadgets

2012-04-09 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/4291/ --- (Updated 2012-04-09 20:02:38.850154) Review request for shindig, Ryan Baxter

Review Request: Share OAuth2Token for a user across multiple gadgets

2012-03-11 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/4291/ --- Review request for shindig, Ryan Baxter and li xu. Summary --- Allows

Re: Review Request: Share OAuth2Token for a user across multiple gadgets

2012-03-11 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/4291/ --- (Updated 2012-03-11 17:43:19.266570) Review request for shindig, Ryan Baxter

Re: Review Request: gadgets.io.makeRequest supports PUT but the PUT body is not passed along

2012-03-09 Thread Adam Clarke
/ --- (Updated 2012-03-09 19:23:05) Review request for shindig, Dan Dumont and Adam Clarke. Summary --- Currently I can use gadgets.io.makeRequest to do a PUT but the PUT body does not reach the destination. This works today for POST, it simply seems that PUT was left out

Re: Review Request: Improvement to OAuth2 message files

2012-03-06 Thread Adam Clarke
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/4202/#review5653 --- Ship it! LGTM - Adam On 2012-03-06 19:29:51, li xu wrote:

Re: Review Request: OAuth2 access tokens being removed from OAuth2Store when request returns any 4xx response

2012-02-29 Thread Adam Clarke
, visit: https://reviews.apache.org/r/3987/ --- (Updated 2012-02-21 21:40:31) Review request for shindig, li xu and Adam Clarke. Summary --- From JIRA: If the url to which a gadget is doing a makeRequest doesn't exist, i.e

Re: OAuth2Cache

2011-12-13 Thread A Clarke
Doug, Both in-memory and non-caching options could be acceptable. You could even provide your own OAuth2Store implementation that doesn't even use the OAuth2Persistence and OAuth2Cache interfaces. It's not really possible to make a recommendation without knowing all the variables in your

Re: OAUTH2 ClientAuthenticationHandler: No access to security token

2011-12-08 Thread A Clarke
I agree with Li's suggested approach. Making the request parameters available on the OAuth2Accessor means they'll be generally available to all the different handlers/phases of the OAuth2 flow. Plus it doesn't require signature changes on the handler interfaces, which is nice. On Thu, Dec 8,

Re: Review Request: OAuthResponseParms logger does not resolve msgKey into appropriate message

2011-09-21 Thread Adam Clarke
On 2011-09-20 08:41:49, Paul Lindner wrote: thanks! Addressed in the second patch for https://reviews.apache.org/r/1947/ - Adam --- This is an automatically generated e-mail. To reply, visit: