[jboss-jira] [JBoss JIRA] (ELY-455) OAuth2 Credential Store

[ https://issues.jboss.org/browse/ELY-455?page=com.atlassian.jira.plugin.sy... ] Pedro Igor commented on ELY-455: -------------------------------- OAuth2 basically translates to a special type of token that is actually used to actually access resources protected by a resource server, the *access_token*. This protocol also defines another special type of token that can be used to refresh a access_token, the *refresh_token*. For some OAuth2 Grant Types, the refresh_token is obtained from the same response that returned the access_token. For these grant types, we need to be able to also store the refresh_token in order to be able to refresh a access_token later. In addition to that, an Access Token Response from an Authorization Server also provides some important information about the access_token such as *expiration* time. This is probably another information that we need to have in the credential store. Regarding the logic to actually refresh access tokens and check their validity, we will be using a separated component such as a {{CallbackHandler}}. Which will use the OAuth2 Credential Store to store/retrieve tokens. We already have two JIRAs for these CBHs: ELY-675 and ELY-658. Any comments ? -- This message was sent by Atlassian JIRA (v7.2.3#72005)