[ 
https://issues.apache.org/jira/browse/SHINDIG-897?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12673767#action_12673767
 ] 

Paul Lindner commented on SHINDIG-897:
--------------------------------------

I modified Cassie's patch a bit and committed that code.  I was able to get the 
PHP client talking to the URL endpoints defined in the service.

I took out the consumer secret generator hack and moved that to 
canonicaldb.json.  I also added a number of methods to the OAuthDataStore which 
abstract the state changes required for the OAuth dance.

With a little work we can make the OAuthServlet work for any conditions, we 
just need to delineate a pass off to the native authentication/authorization UI 
flow and provide a callback handler for return from that.

This change also seems to break the samples project, I'm going to commit this 
and start clean and see if that fixes it.


> Add 3-legged OAuth validation support for RESTful api
> -----------------------------------------------------
>
>                 Key: SHINDIG-897
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-897
>             Project: Shindig
>          Issue Type: Improvement
>          Components: Java
>            Reporter: Jacky Wang
>            Priority: Minor
>         Attachments: alternativeOAuth.patch, 
> supports-3-legged-oauth-validation.patch, 
> supports-3-legged-oauth-validation.patch
>
>   Original Estimate: 24h
>  Remaining Estimate: 24h
>
> RESTful API now supports 2-legged OAuth, and we'd like to see it supports 
> validation for requests issued by 3-legged OAuth client.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to