[SLING-6969] Support OAuth 2.0 server to server authentication in Distribution transport

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Content Distribution Core 0.1.1
• Fix Version/s: Content Distribution Core 0.2.10
• Component/s: Content Distribution
• Assignee: Timothee Maret
• Reporter: Timothee Maret
• Created: 20/Jun/17 12:45
• Updated: 21/Jun/17 09:05
• Resolved: 21/Jun/17 09:05

Description

The SCD transport should support OAuth 2.0 Authorization Grants flow [0].
With this flow access token are passed via the Authorization header to every requests.
The SimpleHttpDistributionTransport should be extended to support an Authorization header provided via the DistributionTransportSecret.
A custom DistributionTransportSecretProvider implementation would provide the access token in the DistributionTransportSecret's credentials map.

[0] https://tools.ietf.org/html/rfc7523