Feature Request: Oauth2 Support

[WilliamHoang]

Feature Request: Oauth2 Support

Scenario:
Provide support for social network login and sync functionality based on session/token

Links:
https://dev.twitter.com/oauth/overview
https://developers.facebook.com/docs/android/login-with-facebook/v2.2

@adamcfraser Would this be possible and what the necessary components needed?

[adamcfraser]

OAuth2 support is possible, as far as I know. There are more moving pieces required (on both clients and gateway) than the token-based implementation we've got for Facebook now, but we could get it on the roadmap. I agree it would be useful in particular for something like twitter-based auth - I don't think they've got any alternative. For Facebook - have you heard of particular issues when trying to use our existing token-based auth that would specifically require OAuth2? The only Facebook issue I've heard about is the one described in #493.

[tleyden]

@adamcfraser the main "ask" here is to support twitter logins, and if we used OAuth2, it might kill more birds with one stone.

[WilliamHoang]

@adamcfraser outside of the #493, which OAuth2 support would resolve I believe, I have not heard of other issues aside from Use-Case where folks are looking for alternatives outside of what we currently have.

Curious to understand what would be the additional moving pieces you see?

[zgramana]

OAuth2 is frequently used as a bridging protocol used to implement federated identity with existing (and often complex) authentication systems. Social providers are among them, but there's also wrapping OAuth2 around Active Directory, for example, or a custom Java SSO system built in-house.

[adamcfraser]

Closing, as will be delivered via OpenID Connect support in 1.3.