Re: [OAUTH-WG] Do we have any public implementations of OAuth 2.0 MAC Token Profile..?

Hannes Tschofenig <hannes.tschofenig@gmx.net> Sun, 30 March 2014 15:13 UTC

Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 482EA1A063E for <oauth@ietfa.amsl.com>; Sun, 30 Mar 2014 08:13:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ERDfCoobFcXB for <oauth@ietfa.amsl.com>; Sun, 30 Mar 2014 08:13:40 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) by ietfa.amsl.com (Postfix) with ESMTP id 4B01A1A034C for <oauth@ietf.org>; Sun, 30 Mar 2014 08:13:40 -0700 (PDT)
Received: from [192.168.131.137] ([80.92.119.215]) by mail.gmx.com (mrgmx001) with ESMTPSA (Nemesis) id 0LpKKr-1X0ZMw2v7F-00fAHN; Sun, 30 Mar 2014 17:13:35 +0200
Message-ID: <53383308.7040306@gmx.net>
Date: Sun, 30 Mar 2014 17:06:48 +0200
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: Prabath Siriwardena <prabath@wso2.com>, "oauth@ietf.org WG" <oauth@ietf.org>
References: <CAJV9qO8NGmiXv3VuSzhamY+3qbPSXeM=8E1Wh7MV+6ptE+7fFQ@mail.gmail.com>
In-Reply-To: <CAJV9qO8NGmiXv3VuSzhamY+3qbPSXeM=8E1Wh7MV+6ptE+7fFQ@mail.gmail.com>
X-Enigmail-Version: 1.5.2
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="HecT6m7mPLNOcqTWSTnta4DdDp6HlJxui"
X-Provags-ID: V03:K0:MOY3lM1BsbM5vLKe0Pcu/jO2tgyw23cMzXUO4D+dbzwL7gc2IPu OmJqlXSKm+k2YtvGo8PSW+NvsmhqnyeQyY41u3+CN7naSQgNJ/qL7nBfeuR0YGurtBmMIJN SJamwwjjQ3l0n6k8M0FQLkqddUO3gsqDbZ9UqXjf8BejMsRaT/1q5+3BeP2I5j07xrlUkc+ qBLbJlT+EWYP9JyMw5vJQ==
Archived-At: http://mailarchive.ietf.org/arch/msg/oauth/GUQTawKhd22rAqOb-ltr1kN40rg
Subject: Re: [OAUTH-WG] Do we have any public implementations of OAuth 2.0 MAC Token Profile..?
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 30 Mar 2014 15:13:42 -0000

Hi Prabath,

I remember that someone mentioned that he had implemented that version
of the document. Unfortunately, I cannot point you to the code from the
top of my head.

The main reason for my response is, however, different. At the last IETF
meeting I presented a proposal for moving this "better-than-bearer
token" work forward and there will be changes to what is currently in
this document.

So, I would encourage you to wait a few weeks and you will the updated
version of the document.

Ciao
Hannes


On 03/28/2014 01:10 AM, Prabath Siriwardena wrote:
> Do we have any public implementations of OAuth 2.0 MAC Token Profile..?
> 
> [1]: http://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-05
> 
> 
> Thanks & Regards,
> Prabath
> 
> Twitter : @prabath
> LinkedIn : http://www.linkedin.com/in/prabathsiriwardena
> 
> Mobile : +94 71 809 6732
> 
> http://blog.facilelogin.com
> http://blog.api-security.org
> 
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>