[
https://issues.apache.org/jira/browse/SHINDIG-1051?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Márton Salomváry updated SHINDIG-1051:
--------------------------------------
Attachment: oauth_core_for_testing.patch
shindig_oauth_rsa.patch
Attached patch to oauth core based on SHINDIG-1020 for testing.
> restful oauth validation is broken with rsa signature method
> ------------------------------------------------------------
>
> Key: SHINDIG-1051
> URL: https://issues.apache.org/jira/browse/SHINDIG-1051
> Project: Shindig
> Issue Type: Bug
> Components: Java
> Affects Versions: trunk
> Reporter: Márton Salomváry
> Attachments: oauth_core_for_testing.patch, shindig_oauth_rsa.patch
>
>
> ...because rsa_public key is not set on Consumer.
> Patch for SampleOAuthDataStore attached, but the solution is far from
> elegant, and rises further questions:
> - Why is oauth restful request validation based on data stored in
> applications "table"?
> - What is config/oauth.json for?
> - Refactoring of all oauth related code should be considered. I found very
> hard to find which parts of the code handle "incoming" and which parts handle
> "outgoing" oauth requests.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.