apache / apache/maven-resolver

Support OAuth 2 based authentication

Open
#1,850 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
152
Forks
160
Avg merge
1d 4h
Merged PRs (30d)
49

Description

### New feature, improvement proposal

Next to HTTP Basic Auth and TLS Certificates there should be support for OAuth tokens being retrieved first and then being sent along via `Authorization: Bearer ...` as defined in https://www.rfc-editor.org/rfc/rfc6750.

This requires additional requests for retrieving the token via a non-interactive or interactive OAuth flow.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the existing HTTP Basic Auth and TLS Certificate authentication paths, then read RFC 6750 and compare its bearer-token requirements with the resolver's current request flow. Done means supporting OAuth token retrieval through the stated non-interactive or interactive flow and sending the resulting token as an Authorization: Bearer header.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.