Hi guys,

I just added an oauth2 module. It hosts a small oauth2 server. There are 2
goals through this module:

1. of course have an oauth2 server but it fully relies on CXF (if there are
no objections I'll forward this mail to cxf list in a few days). This means
we just own the glue code but not really the oauth2 code itself for now
(hope it stays like that since CXF owns a lot in that area).
2. show how you can build an application with Meecrowave. Here it is really
interesting for us cause it shows: a) the config wiring from the cli to the
app using meecrowave native light/low level API, b) integrate with 3rd
party libraries and create a fatjar

I added some light doc in our doc module.

Just to say a word on the targetted features and what was tested:

- tested
-- password grant flow with jcache data provider
-- refresh grant flow with jcache data provider

- code is there but not tested (= can miss some setup)
-- jpa data provider (should be as easy as copying the jcache tests
changing container config but didn't get time)
-- client support (but this is part of CXF code so should be fine)
-- JWT support
-- other flows: client_credentials,
authorization_code, urn:ietf:params:oauth:grant-type:jwt-bearer

- todo?
-- check JWT support with standard grant flows
-- support for self protected services (if a user imports meecrowave-oauth2
as dependency of its fatjar and has its own secured resources - see
OAuthRequestFilter from cxf)
-- add other endpoints (revoke, validate etc)


Not fully sure the time I can allocate to it this month but I'd like to
enhance tests, at least for jpa provider, client support and probably jwt.


Let me know your thoughts (whatever it is: "want to help", "shouldn't be
there", "rocks, but can we add X", etc...).


Romain Manni-Bucau
@rmannibucau <https://twitter.com/rmannibucau> |  Blog
<https://blog-rmannibucau.rhcloud.com> | Old Blog
<http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> |
LinkedIn <https://www.linkedin.com/in/rmannibucau> | JavaEE Factory
<https://javaeefactory-rmannibucau.rhcloud.com>

Reply via email to