Twitter oauth authenticator that can be used with any Java-based Web API
Switch branches/tags
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.


Twitter Authenticator Plug-in

This project provides an opens source Twitter Authenticator plug-in for the Curity Identity Server. This allows an administrator to add functionality to Curity which will then enable end users to login using their Twitter credentials. The app that integrates with Curity may also be configured to receive the Twitter access token and refresh token, allowing it to manage resources in Twitter.

System Requirements

Requirements for Building from Source

  • Maven 3
  • Java JDK v. 8

Compiling the Plug-in from Source

The source is very easy to compile. To do so from a shell, issue this command: mvn package.


To install this plug-in, either download a binary version available from the releases section of this project's GitHub repository or compile it from source (as described above). If you compiled the plug-in from source, the package will be placed in the target subdirectory. The resulting JAR file or the one downloaded from GitHub needs to placed in the directory ${IDSVR_HOME}/usr/share/plugins/twitter. (The name of the last directory, twitter, which is the plug-in group, is arbitrary and can be anything.) After doing so, the plug-in will become available as soon as the node is restarted.


The JAR file needs to be deployed to each run-time node and the admin node. For simple test deployments where the admin node is a run-time node, the JAR file only needs to be copied to one location.

Following jars must be in plugin group classpath.

For a more detailed explanation of installing plug-ins, refer to the Curity developer guide.

Creating an App in Twitter

As described in the Twitter documentation, you can create apps that use the Twitter APIs as shown in the following figure:


Fill in the name, description and website and save changes.

When you view the app's configuration after creating it, you'll find the Consumer Key and Consumer Secret in Keys and Access Tokens section. These will be needed later when configuring the plug-in in Curity.


You can manage permissions to twitter resource in Permissions section of app configuration as show in below figure:


Creating a Twitter Authenticator in Curity

The easiest way to configure a new Twitter authenticator is using the Curity admin UI. The configuration for this can be downloaded as XML or CLI commands later, so only the steps to do this in the GUI will be described.

  1. Go to the Authenticators page of the authentication profile wherein the authenticator instance should be created.

  2. Click the New Authenticator button.

  3. Enter a name (e.g., twitter1). This name needs to match the URI component in the callback URI set in the Twitter app.

  4. For the type, pick the Twitter option:

  5. On the next page, you can define all of the standard authenticator configuration options like any previous authenticator that should run, the resulting ACR, transformers that should executed, etc. At the bottom of the configuration page, the Twitter-specific options can be found.

    The Twitter-specific configuration is generated dynamically based on the configuration model defined in the Java interface.

  6. In the Client ID textfield, enter the Consumer Key from the Twitter client app.

  7. Also enter the matching Consumer Secret.

Once all of these changes are made, they will be staged, but not committed (i.e., not running). To make them active, click the Commit menu option in the Changes menu. Optionally enter a comment in the Deploy Changes dialogue and click OK.

Once the configuration is committed and running, the authenticator can be used like any other.


This plugin and its associated documentation is listed under the Apache 2 license.

More Information

Please visit for more information about the Curity Identity Server.

Copyright (C) 2017 Curity AB.