CXF OAuth 1.0 extension

Note: This page describes the OAuth GSOC 2009 project led by Lucasz Moren. Please go to the JAX-RS OAuth page for an up-to-date information.

...

and perform OAuth 1.0 authorization on their JAXRS services in a easy manner, by hiding complex OAuth flow. 

Downloading CXF OAuth 1.0 module

OAuth Server basic configuration

...

• client application 
• resource owner which provides credentials to authorize client to the server
• list of scopes accepted by the resource owner
• list of permissions (list of roles)

Intercepting OAuth authenticated requests

OAuthSecurityFilter

org.apache.cxf.auth.oauth.interceptors.OAuthSecurityFilter

...

by using: SpringOAuthAuthenticationFilter

Spring Security Integration

SpringOAuthAuthenticationFilter

...

This exception mapper converts Spring Security exceptions (i.e. AccessDeniedException) into http response that is compliant with OAuth 1.0 specification.

OAuth Demo Server

Sample implementation of an OAuth server, build with using CXF OAuth extension. Provides simple functionality for preregistering OAuth clients, viewing authorized clients and revoking access to the server.

OAuth Demo Client

OAuth 1.0 client web application that is able to make OAuth authenticated requests