[CXF-4431] Add support for OAuth2 'mac' token type

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.1
• Fix Version/s: 2.6.3, 2.7
• Component/s: JAX-RS, JAX-RS Security
• Estimated Complexity: Moderate
• Assignee: Sergey Beryozkin
• Reporter: Sasi M
• Created: 18/Jul/12 02:54
• Updated: 25/Jan/13 12:51
• Resolved: 28/Sep/12 14:33

Description

CXF currently supports only the Bearer token type. This token type is not feasible for use without SSL.
OAuth2 specs out the 'mac' token type that requires request signing for authentication using the access token. The spec is described here:
http://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01