Hi Sandiago
On Sep 26, 2012, at 12:42 PM, weiwei wrote: > Hi amber experts: > My name is Sandiago and come from China. I just get your email on Apache. > It is my first time communicate technical problem like this, hope not disturb > you too much. > Now, my company want to implement oauth2.0，and I know you are working on > Amber. So, I have two question regarding it. > 1、Why you write Amber, because I can also implement oauth2.0 by myself. > Does Amber focus on performance and security? Apache Amber (incubator) is a framework that should help you implementing an OAuth client/server in Java. It contains a lot of goodies including the validation part spec compliant and other nice APIs. > 2、My leader tell me I should expose the server interface via https, instead > of http, It is right? Specification wise this is right specially when you use bearer token. Regards Antonio > > Thanks very much > Sandiago
