Re: [Dev] OAuth validation extension point in WSO2 IS

2013-12-08 Thread Johann Nallathamby
Hi, This improvement has been added with r192746 and r192747. The DefaultOAuth2TokenValidator provides 3 hooks. - boolean validateAccessDelegation - boolean validateScope - boolean validateAccessToken All 3 methods simply return true by default. A practical OAuth2BearerTokenValidator should

[Dev] OAuth validation extension point in WSO2 IS

2013-11-11 Thread Pradeep Fernando
Hi, The current token validation endpoint only performs basic level of validation. That is it only checks whether the given token is valid. But for complex authorization decision making this validation is not enough IMHO. @IS team: can you guys please consider adding an extension point for

Re: [Dev] OAuth validation extension point in WSO2 IS

2013-11-11 Thread Asela Pathberiya
Hi Pradeep, This has been already discussed on Architecture thread. This is a must thing that we want to have in IS 4.6.0. (next release). I am not still sure whether some one already has been worked on this. Johann any idea?.. If not, It is great, If you can introduce the extension. Thanks,

Re: [Dev] OAuth validation extension point in WSO2 IS

2013-11-11 Thread Johann Nallathamby
I will add this. On Tue, Nov 12, 2013 at 10:58 AM, Asela Pathberiya as...@wso2.com wrote: Hi Pradeep, This has been already discussed on Architecture thread. This is a must thing that we want to have in IS 4.6.0. (next release). I am not still sure whether some one already has been