[CXF-4051] Custom OAuth scopes are not supported

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.5.3, 2.6
• Component/s: JAX-RS
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Sergey Beryozkin
• Created: 22/Jan/12 22:10
• Updated: 23/Apr/12 16:45
• Resolved: 23/Jan/12 11:03

Description

Clients can include custom scopes ("x-oauth-scope" in CXF (OAuth 1.0 extension), "scope" in OAuth 2.0).
This does not get passed via Authorization header, mainly due to the bug in the Google lib.
Another bug is that on the server side the custom form payload is assumed to be part of the OAuth payload.