[zanata/zanata-server] 35bf7b: ZNTA-942 make Zanata server an OAuth 2.0 AS and RS

GitHub noreply at github.com
Wed Mar 16 00:07:38 UTC 2016


  Branch: refs/heads/ZNTA-942-oauth
  Home:   https://github.com/zanata/zanata-server
  Commit: 35bf7b832fd3b535d340c3c7fd01552e2d0e89a8
      https://github.com/zanata/zanata-server/commit/35bf7b832fd3b535d340c3c7fd01552e2d0e89a8
  Author: Patrick Huang <pahuang at redhat.com>
  Date:   2016-03-16 (Wed, 16 Mar 2016)

  Changed paths:
    M zanata-war/pom.xml
    M zanata-war/src/main/java/org/zanata/ApplicationConfiguration.java
    M zanata-war/src/main/java/org/zanata/action/LoginAction.java
    A zanata-war/src/main/java/org/zanata/dao/AuthorizationCodeDAO.java
    A zanata-war/src/main/java/org/zanata/rest/oauth/AuthorizedResource.java
    A zanata-war/src/main/java/org/zanata/rest/oauth/TokenService.java
    M zanata-war/src/main/java/org/zanata/security/SecurityFunctions.java
    A zanata-war/src/main/java/org/zanata/security/annotations/AuthType.java
    A zanata-war/src/main/java/org/zanata/security/oauth/AuthorizeAction.java
    A zanata-war/src/main/java/org/zanata/security/oauth/SecurityTokens.java
    A zanata-war/src/main/java/org/zanata/service/AuthenticationService.java
    A zanata-war/src/main/java/org/zanata/service/impl/AuthenticationServiceImpl.java
    A zanata-war/src/main/java/org/zanata/servlet/OAuthFilter.java
    M zanata-war/src/main/java/org/zanata/util/FacesNavigationUtil.java
    M zanata-war/src/main/resources/messages.properties
    M zanata-war/src/main/webapp-jboss/WEB-INF/web.xml
    M zanata-war/src/main/webapp/WEB-INF/urlrewrite.xml
    A zanata-war/src/main/webapp/authorize/home.xhtml

  Log Message:
  -----------
  ZNTA-942 make Zanata server an OAuth 2.0 AS and RS

Zanata server now can act as a AS(Authorization Server) and itself being
a RS (Resource Server). It uses authorization code, access token and
refresh token.

This implementation is still a WIP because client id and refresh token
are not persisted to the database. Access token authorization is
temporarily enabled for just one REST resource.




More information about the zanata-commits mailing list