[CONF] Apache CXF Documentation > JAXRS OAuth2 Assertions

[confluence]

JAXRS OAuth2 Assertions Page added by Sergey Beryozkin JAX-RS: OAuth2 Assertions Introduction SAML2 Bearer Access Token Grant Authentication Token Introduction OAuth 2.0 supports different types of access token grants. OAuth2 Assertions draft "provides a framework for the use of assertions with OAuth 2.0" and SAML2 Bearer Assertion Profiles for OAuth2 draft specifically provides for the use of SAML2 Bearer assertions. These assertions can be used as token grants, but also, if needed, for getting 3rd party clients authenticated. Note the clients can use assertions as grants but use for example Basic authentication mechanism, or use say an authorization code grant and the assertion to authenticate, and finally, they can use assertions as a grant and as an authentication token. Currently CXF supports SAML2 Bearer assertions as grants and authentication tokens. See also the JAX-RS OAuth2 page for information about OAuth 2.0 support in CXF. SAML2 Bearer Access Token Grant Authentication Token Change Notification Preferences View Online | Add Comment