Re: [Architecture] Trusted Delegation using OAuth2 Tokens

Hi Sumedha, This needs to be better modeled after A Method of Bearer Token Redelegation and Chaining for OAuth 2 http://tools.ietf.org/id/draft-richer-oauth-chain-00.txt The grant type needs to be urn:ietf:params:oauth:grant_type:redelegate And also - we should not provide a refresh token in

Re: [Architecture] Trusted Delegation using OAuth2 Tokens

Thanks Prabath. Will read the spec come up with necessary changes. On Wed, Sep 11, 2013 at 4:08 PM, Prabath Siriwardena prab...@wso2.comwrote: Hi Sumedha, This needs to be better modeled after A Method of Bearer Token Redelegation and Chaining for OAuth 2

[Architecture] [Appfactory] Managing permissions in Appfactory at different levels

Hi all, Can someone explain how we are going to manage AF level permissions bound by roles like Developer, QA, DevOps and application level permissions required to build the application? For example, as the application developer, I need to manage set of roles(GeneralUser, AdvancedUser) to

[Architecture] Building a Multi-Tenant, Tenant-Aware SaaS App with the WSO2 Carbon Framework

Hi WSO2 Community, I have posted code on GitHub [1] illustrating how to create a multi-tenant, tenant-aware SaaS application with the WSO2 Carbon Framework. Your comments, recommendations, and pull requests are welcome. An introductory Blog Post [2] and Step One of the getting started

Re: [Architecture] [Appfactory] Managing permissions in Appfactory at different levels

Hi, Now we don't have Application level roles.We have tenant level roles (for the WSO2 Con). So once a user is added as a developer of the tenant .He belongs to every application inside the tenant. So basically it's like this. Users can be imported to tenant using bulk import and at the moment