So basically I want to protect my APIs with OAuth 2.0 and implement an OAuth Provider to enable acquiry of accessTokens etc.

Can it be done with JOAuth out of the box?

Has anybody already implemented something like this with an Open Source library (Java)?

有帮助吗?

解决方案

Spring Security has an OAuth sub-project with support for OAuth 1.0a and OAuth2 (both client and server). They have sample code on their GitHub repo:

Apache Amber (http://oltu.apache.org/) is another project (now deprecated) that makes it fairly straightforward to build an OAuth2 provider. See:

其他提示

https://github.com/OpenConextApps/apis is an full-fledged Java Open Source Implementation of an OAuth2 authorization server.

The implementations section of OAuth 2.0 Code and Services listed both server side libraries and client libraries in a quite comprehensive manner.

you can download provider & client source codes.

https://github.com/stepanowon/OAuth_20

but, the comment was written by korean. you must read rfc documents. i didn't use spring-security.

http://tools.ietf.org/html/draft-ietf-oauth-v2-31

You can also use CloudFoundry User Account and Authentication (UAA) Server

It Supports: OAuth2, OpenId Connect, SCIM, SSO

You can clone it from https://github.com/cloudfoundry/uaa.

You can try https://github.com/apifest/apifest-oauth20. It's an open-source project written in pure Java and implements the OAuth 2.0 specification - https://tools.ietf.org/html/rfc6749.

For Play Framework (Scala) you can use https://github.com/nulab/scala-oauth2-provider

You could fork the scribe git repository on github. I've used scribe and it's super easy, and Pablo (the creator) is great to work with. He'll help you out.

许可以下: CC-BY-SA归因
不隶属于 StackOverflow
scroll top