[jira] Updated: (SHINDIG-1051) restful oauth validation is broken with rsa signature method

["Márton Salomváry (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SHINDIG-1051?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Márton Salomváry updated SHINDIG-1051:
--------------------------------------

    Attachment: oauth_core_for_testing.patch
                shindig_oauth_rsa.patch

Attached patch to oauth core based on SHINDIG-1020 for testing.

> restful oauth validation is broken with rsa signature method
> ------------------------------------------------------------
>
>                 Key: SHINDIG-1051
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-1051
>             Project: Shindig
>          Issue Type: Bug
>          Components: Java
>    Affects Versions: trunk
>            Reporter: Márton Salomváry
>         Attachments: oauth_core_for_testing.patch, shindig_oauth_rsa.patch
>
>
> ...because rsa_public key is not set on Consumer.
> Patch for SampleOAuthDataStore attached, but the solution is far from elegant, and rises further questions:
> - Why is oauth restful request validation based on data stored in applications "table"?
> - What is config/oauth.json for?
> - Refactoring of all oauth related code should be considered. I found very hard to find which parts of the code handle "incoming" and which parts handle "outgoing" oauth requests.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.