[CXF-6692] Update AbstractOAuthDataProvider to support JWT access tokens

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.1.8, 3.2.0
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Sergey Beryozkin
• Created: 26/Nov/15 12:39
• Updated: 21/Oct/16 18:45
• Resolved: 12/Aug/16 14:51

Description

CXF already ships DefaultEncryptingOAuthProvider which can be used by the servers to avoid storing the OAuth2 model, it uses a custom seriallization format. It makes sense to offer a provider which uses a JWT token as a properties container before encrypting it.