[jira] [Comment Edited] (CXF-6288) OAuth2: Hook to Pre-process or post process the scopes to have more control over Authorization

["Sergey Beryozkin (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CXF-6288?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14356847#comment-14356847 ] 

Sergey Beryozkin edited comment on CXF-6288 at 3/11/15 1:16 PM:
----------------------------------------------------------------

Can you clarify please what you mean under "grant scopes to the end user" ? The 3rd part client requests some scopes and the end user authorizes whether the client can get a token with the relevant scopes or not

Thanks, Sergey


was (Author: sergey_beryozkin):
Can you clarify please what you under "grant scopes to the end user" ? The 3rd part client requests some scopes and the end user authorizes whether the client can get a token with the relevant scopes or not

Thanks, Sergey

> OAuth2: Hook to Pre-process or post process the scopes to have more control over Authorization
> ----------------------------------------------------------------------------------------------
>
>                 Key: CXF-6288
>                 URL: https://issues.apache.org/jira/browse/CXF-6288
>             Project: CXF
>          Issue Type: New Feature
>          Components: JAX-RS Security
>            Reporter: pavan
>            Priority: Critical
>
> We have a requirement as such to grant scopes to the end user based on user roles. With the current cxf implementation we cant implement such requirement. It will be possible if CXF provide us with a hook which will enable the developers to process the scopes and return the resultant scopes.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)