Support for adding OAuth1(a) and OAuth2 features (consumer and provider) for Spring web applications.
The Spring Security OAuth project is deprecated. The latest OAuth 2.0 support is provided by Spring Security. See the OAuth 2.0 Migration Guide for further details.
This project provides support for using Spring Security with OAuth (1a) and OAuth2. It provides features for implementing both consumers and providers of these protocols using standard Spring and Spring Security programming models and configuration idioms.
$ git clone ... $ mvn install -P bootstrap
bootstrapprofile only the first time - it enables some repositories that can't be exposed in the poms by default. You may find it useful to add this profile to your local
You need to run Redis to get the build to work. You can install this using homebrew. Without Redis running the build will lots of Jedis connection exceptions
SpringSource ToolSuite users (or Eclipse users with the latest m2eclipse plugin) can import the projects as existing Maven projects.
Spring Security OAuth is released under the terms of the Apache Software License Version 2.0 (see license.txt).
Samples and integration tests are in a subdirectory. There is a separate README there for orientation and information. Once you have installed the artifacts locally (as per the getting started instructions above) you should be able to
$ cd samples/oauth2/tonr $ mvn tomcat7:run
and visit the app in your browser at http://localhost:8080/tonr2/ to check that it works. (This is for the OAuth 2.0 sample, for the OAuth 1.0a sample just remove the "2" from the directory path.) Integration tests require slightly different settings for Tomcat so you need to add a profile:
$ cd samples/oauth2/tonr $ mvn integration-test -P integration
Here are some ways for you to get involved in the community:
Before we accept a non-trivial patch or pull request we will need you to sign the contributor's agreement. Signing the contributor's agreement does not grant anyone commit rights to the main repository, but it does mean that we can accept your contributions, and you will get an author credit if we do. Active contributors might be asked to join the core team, and given the ability to merge pull requests.
None of these is essential for a pull request, but they will all help. They can also be added after the original pull request but before a merge.
eclipse-code-formatter.xmlfrom the root of the project if you are using Eclipse. If using IntelliJ, copy
~/.IntelliJIdea*/config/codestylesand select spring-intellij-code-style from Settings -> Code Styles.