Update OAuth 2.0 extension to final version

[jlouvel]

Starting from the draft 30 support, we need to update the implementation to the final standard and properly document it as reported by Bjorn Roche.
http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=3010809

[jlouvel]

We should also leverage the new constants added to 2.2: ChallengeScheme.HTTP_OAUTH_BEARER and HTTP_OAUTH_MAC.

Additional tests need to be done as weel following up issue #644

[jlouvel]

Added warning about draft 30 update needed on the wiki. Moved to 2.2 M2.

[jlouvel]

Refactored the OAuth extension to prevent the additional org.restlet.ext.oauth.security package and follow the Restlet extensions convention (a single public package, all others below the 'internal' subpackage).

Also, we might want to restore a deprecated version of OAuthAuthorizer to facilitate updates.

@FantomJAC

[FantomJAC]

Since OAuth2.0 draft31 has approved as final spec, I need to update the code.

[jlouvel]

Thanks, that would be great. I'm planning to get more involved in this extension as well as we started a R&D project that requires its support.

[FantomJAC]

I've done major updates on server-side implementation.

FantomJAC@2a1f9ea

However, this is testing version. I will make pull request after writing tests and client-side implementations.

[jlouvel]

This looks awesome, thanks for all the hardwork. I'll look at writing a new Restlet/OAuth tutorial as many potential users request it and get frustrated otherwise.

Let's try to release this with RF 2.2 M2 or M3.

When do you think you can have client-side support and test as a pull request?

[jlouvel]

I have pushed some changes regarding the Role support in the Restlet API (see latest commits) and had to go over their usage in the OAuth extension.

This should fix the issue we had with equality between two roles with the same name which was false if it wasn't the exact same Java object instance.

88c301b

[FantomJAC]

Thanks for adding Role#equals.

I've just pushed the client-side implementation to my Fork.
The new OAuthProxy has a backward compatibility with Graph API as well as final spec.
I did a manual test with Google and Facebook, and it works fine.
I'm still working on the automated tests.

FantomJAC@5dbfbff

[jlouvel]

Thanks for this update including manual tests and javadocs. Do you want to sent a pull request so we can merge this before 2.2 M2 (due in a few days)?

[n7labs]

Hi Guys, I"m pretty new to restlet, I'm also learning how to use Oauth. Do you have any tutorials or pointers that could help me get started?
Thanks a million.

[bejayoharen]

This is an area that needs improvement. I started working on some tutorials, but I dropped the ball before I even learned how to use it. I will pick it up again, but haven't had a chance, yet.

bjorn

On Feb 25, 2013, at 3:54 PM, n7labs wrote:

Hi Guys, I"m pretty new to restlet, I'm also learning how to use Oauth. Do you have any tutorials or pointers that could help me get started?
Thanks a million.

—
Reply to this email directly or view it on GitHub.

---

Bjorn Roche
http://www.xonami.com
Audio Collaboration
http://blog.bjornroche.com
@xonamiaudio

[FantomJAC]

Jerome,
My apologies for the delay. I've update the OAuth example codes.
I think we should try to release with 2.2-M3.

FantomJAC@d3abe02