[QPIDJMS-367] Add support for XOAUTH2 SASL authentication mechanism

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.31.0
• Component/s: qpid-jms-client
• Assignee: Robert Godfrey
• Reporter: Robert Godfrey
• Created: 14/Mar/18 14:11
• Updated: 27/Mar/18 16:37
• Resolved: 14/Mar/18 15:28

Description

https://developers.google.com/gmail/imap/xoauth2-protocol defines a SASL mechanism which allows for authentication using an OAUTH2 Acess Token.  This mechanism is supported by Qpid Broker-J and it would be useful if the Qpid JMS client could connect using this mechanism.

The mechanics of the mechanism pass a username and token, the latter essentially being equivalent to a password for these purposes.  The Token MUST be provided as a Base64 encoded string (the contents of which are a token in JSON format, though this detail is opaque to the client).  

Issue Links

• is related to: QPIDJMS-372 [SASL] [XOAUTH2] Access token validation too restrictive