Re: [cross-project-issues-dev] OAuth 2.0 & Eclipse Services

[Matthias Sohn <matthias.sohn@xxxxxxxxx>]

On Fri, Jul 24, 2015 at 10:34 AM, Marcel Bruch <marcel.bruch@xxxxxxxxxxxxxx> wrote:

Greetings cross-projects,

for the error reporting I’d like to give committers/reporters the ability to store personal preferences and get access to the errors they sent in the past, current status of these problems etc. For that I need to authenticate users by email address. One (half-baked) idea is to allow users to register using some OAuth provider like Google, Github or - if supported - eclipse.org.

My question is, does any eclipse project have OAuth working in their code base (plugin or server)?

Which libraries do you use and what else should we be aware of?

The gerrit OAuth plugins

https://github.com/davido/gerrit-oauth-provider/

https://gerrit.googlesource.com/plugins/cfoauth/

use the Scribe library [1] to support OAuth authentication against

• Google
  
• Github
  
• CloudFoundry UAA [2]
  

OAuth servers.

When implementing the plugin for CloudFoundry UAA we found that Scribe doesn't really support it

despite the fact that UAA seems to be the implementation closest to the OAuth specification.

Hence we implemented the cfoauth Gerrit plugin to close the gap for Gerrit.

Apache Oltu is another Java based OAuth implementation (both client and server)

listed on http://oauth.net/2/ which seems more powerful than Scribe. Though we have

no practical experience with this implementation.

[1] https://github.com/fernandezpablo85/scribe-java

[2] https://github.com/cloudfoundry/uaa

[3] http://oltu.apache.org/

-Matthias