Client Authentication

Owned by Adam Clarke
Last updated: Sept 19, 2011Version comment
1 min read

Description

Allows shindig developers to inject a new OAuth 2.0 Client Authentication handler into the flow to add authentication headers/etc. to all requests to the authorization and token enpoints for a provider.  The framework will look for all registered ClientAuthenticationHandlers where the ClientAuthenticationHandler.geClientAuthenticationType() equals the OAuth2Accessor.getClientAuthenticationType() for the BasicOAuth2Request.

Specification References

    http://tools.ietf.org/html/draft-ietf-oauth-v2-21#section-2.3

    http://tools.ietf.org/html/draft-ietf-oauth-v2-21#section-2.3.1

Key Classes/Intefraces

           
    org.apache.shindig.gadgets.oauth2.handler.ClientAuthenticationHandler

Provided Sample Implementations

   
    org.apache.shindig.gadgets.oauth2.handler.sample.BasicAuthenticationHandler
 

       
    org.apache.shindig.gadgets.oauth2.handler.sample.StandardAuthenticationHandler
     

Module

       
    org.apache.shindig.gadgets.oauth2.handler.sample.OAuth2HandlerModule


  @Provides
  @Singleton
  List<ClientAuthenticationHandler> provideClientAuthenticationHandlers(
      final BasicAuthenticationHandler basicAuthenticationHandler,
      final StandardAuthenticationHandler standardAuthenticationHandler) {
    return ImmutableList.of((ClientAuthenticationHandler) basicAuthenticationHandler,
        (StandardAuthenticationHandler) standardAuthenticationHandler);
  }

Injected Into

       
    org.apache.shindig.gadgets.oauth2.BasicOAuth2Request

TODO : Should this be a list?  Like

"client_authentication" : "Basic, MyAuthExtension"