Page History

{span:style=font-size:2em;font-weight:bold} JAX-RS: OAuth {span}


{toc}

h1. Introduction

CXF 2.5.0 implements [OAuth 1.0|http://tools.ietf.org/html/rfc5849]. 

While [OAuth 2.0|http://oauth.net/2/] (which is very close to being the final recommendation) is the next major version of OAuth however, OAuth 1.0 is being supported by many providers and the CXF OAuth module should make it easy for developers to start writing OAuth applications, be it OAuth 1.0 or, in time, OAuth 2.0 onesonce the latter gets implemented.   

OAuth offers a complex yet elegant solution toward enabling the end users (resource owners) to authorize third-party providers to access their resources.
The classical OAuth flow is also called a 3-leg OAuth flow as it involves 3 parties: 

Please check the [specification|http://tools.ietf.org/html/rfc5849] and the [Wikipedia article|http://en.wikipedia.org/wiki/OAuth] as well as other resources available on the WEB for more information you may need to know about OAuth. 


h1. Maven dependencies

{code:xml}
<dependency>
  <groupId>org.apache.cxf</groupId>
  <artifactId>cxf-rt-rs-security-oauth</artifactId>
  <version>2.5.0</version>
</dependency>
{code}