svn commit: r1778655 - /openwebbeans/meecrowave/trunk/meecrowave-doc/src/main/jbake/content/meecrowave-oauth2/index.adoc

[rm...@apache.org]

Author: rmannibucau
Date: Fri Jan 13 18:58:04 2017
New Revision: 1778655

URL: http://svn.apache.org/viewvc?rev=1778655&view=rev
Log:
oauth2 doc

Modified:
    openwebbeans/meecrowave/trunk/meecrowave-doc/src/main/jbake/content/meecrowave-oauth2/index.adoc

Modified: openwebbeans/meecrowave/trunk/meecrowave-doc/src/main/jbake/content/meecrowave-oauth2/index.adoc
URL: http://svn.apache.org/viewvc/openwebbeans/meecrowave/trunk/meecrowave-doc/src/main/jbake/content/meecrowave-oauth2/index.adoc?rev=1778655&r1=1778654&r2=1778655&view=diff
==============================================================================
--- openwebbeans/meecrowave/trunk/meecrowave-doc/src/main/jbake/content/meecrowave-oauth2/index.adoc (original)
+++ openwebbeans/meecrowave/trunk/meecrowave-doc/src/main/jbake/content/meecrowave-oauth2/index.adoc Fri Jan 13 18:58:04 2017
@@ -65,3 +65,22 @@ IMPORTANT: these example use inline user
 NOTE: this module is interesting if you plan to base your application development
 on Meecrowave because it shows how to use CLI configuration and wire it in your application
 but also how to use a 3rd party library (CXF there) and build a fatjar.
+
+== Authorization code case
+
+Authorization code flow is a bit more complicated but services (endpoints) can be activated (see configuration - `--oauth2-authorization-code-support`).
+
+You will need to configure CXF to point to the keystore/key to crypt/sign the token in session.
+It is properties based. All CXF properties (`rs.security.*`) are supported but prefixed with `oauth2.cxf.` to avoid
+to mix it with another configuration starting with `rs.*`.
+
+For instance you can use:
+
+[source,properties]
+----
+oauth2.cxf.rs.security.keystore.type = jks
+oauth2.cxf.rs.security.keystore.file = /opt/keystores/oauth2.jks
+oauth2.cxf.rs.security.keystore.password = password
+oauth2.cxf.rs.security.keystore.alias = alice
+oauth2.cxf.rs.security.key.password = pwd
+----