apache / apache/maven-resolver
Support OAuth 2 based authentication
- Dominant language
- Java
- Stars
- 152
- Forks
- 160
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 49
Description
### New feature, improvement proposal
Next to HTTP Basic Auth and TLS Certificates there should be support for OAuth tokens being retrieved first and then being sent along via `Authorization: Bearer ...` as defined in https://www.rfc-editor.org/rfc/rfc6750.
This requires additional requests for retrieving the token via a non-interactive or interactive OAuth flow.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the existing HTTP Basic Auth and TLS Certificate authentication paths, then read RFC 6750 and compare its bearer-token requirements with the resolver's current request flow. Done means supporting OAuth token retrieval through the stated non-interactive or interactive flow and sending the resulting token as an Authorization: Bearer header.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100