NOTE: the following does not use any OAuth Server implementation (no Auth Tokens issued etc). I just want to give you a glimpse at the PicketLink OAuth Provider web application. Uses: PicketLink 3.0 (IDM and Extensions), Aerogear JS, Twitter Bootstrap, RESTEasy and AS7. Uses PL IDM as of this morning. http://todo-anilsaldhana.rhcloud.com/picketlink-oauth-provider/jsp/picket... You can register an account. Then log in. You can then register oauth applications. If the name is already registered, it will throw a pop up saying "Application is already registered". So choose some other name. This is not a production application. Just take it for a spin. Application restarts will lose all data. :) I am sure there are tons of issues, broken functionality. _______________________________________________ security-dev mailing list security-dev(a)lists.jboss.org (mailto:security-dev@lists.jboss.org) https://lists.jboss.org/mailman/listinfo/security-dev

This is an ok start, but the app doesn't do anything and many of the links don't work. I'd like to contribute to the project to make it fully functional. I've already written a complete end-to-end OAuth2 and Bearer token infrastructure that does authentication *AND* authorization via an extension to JWT and have figured all the AS7 integration points to be able to both produce and consume bearer tokens and execute the OAuth2 redirect protocol. So, where's the code in GIT? On 1/18/2013 3:27 PM, Anil Saldhana wrote: > NOTE: the following does not use any OAuth Server implementation (no > Auth Tokens issued etc). > > I just want to give you a glimpse at the PicketLink OAuth Provider web > application. > > Uses: PicketLink 3.0 (IDM and Extensions), Aerogear JS, Twitter > Bootstrap, RESTEasy and AS7. Uses PL IDM as of this morning. > > http://todo-anilsaldhana.rhcloud.com/picketlink-oauth-provider/jsp/picket... > > You can register an account. Then log in. You can then register oauth > applications. If the name is already registered, it will throw a pop up > saying "Application is already registered". So choose some other name. > > This is not a production application. Just take it for a spin. > Application restarts will lose all data. :) > > I am sure there are tons of issues, broken functionality. > _______________________________________________ > security-dev mailing list > security-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/security-dev >

Looks good for a start though. This is exactly what picketlink and JBoss need. A cloud-based auth-server that anybody can use. Good demo On 1/21/2013 12:33 PM, Anil Saldhana wrote: > Bill, > currently it is just a webapp. > https://github.com/anilsaldhana/picketlink-oauth-provider > > The webapp is driven by PL IDM. > > The REST endpoints come from the PicketLink Extensions project. > https://github.com/picketlink/picketlink-extensions > > Things like AccountRegistration (User Registration), SignIn, Logout etc > are just rest services. > > Regards, > Anil > > On 01/21/2013 11:27 AM, Bill Burke wrote: >> This is an ok start, but the app doesn't do anything and many of the >> links don't work. >> >> I'd like to contribute to the project to make it fully functional. I've >> already written a complete end-to-end OAuth2 and Bearer token >> infrastructure that does authentication *AND* authorization via an >> extension to JWT and have figured all the AS7 integration points to be >> able to both produce and consume bearer tokens and execute the OAuth2 >> redirect protocol. >> >> So, where's the code in GIT? >> >> >> On 1/18/2013 3:27 PM, Anil Saldhana wrote: >>> NOTE: the following does not use any OAuth Server implementation (no >>> Auth Tokens issued etc). >>> >>> I just want to give you a glimpse at the PicketLink OAuth Provider web >>> application. >>> >>> Uses: PicketLink 3.0 (IDM and Extensions), Aerogear JS, Twitter >>> Bootstrap, RESTEasy and AS7. Uses PL IDM as of this morning. >>> >>> http://todo-anilsaldhana.rhcloud.com/picketlink-oauth-provider/jsp/picket... >>> >>> You can register an account. Then log in. You can then register oauth >>> applications. If the name is already registered, it will throw a pop up >>> saying "Application is already registered". So choose some other name. >>> >>> This is not a production application. Just take it for a spin. >>> Application restarts will lose all data. :) >>> >>> I am sure there are tons of issues, broken functionality.