View Full Version : Spring OAuth vs. Spring Social
Oct 27th, 2010, 07:55 PM
Both Spring OAuth and Spring Social (http://git.springsource.org/spring-social) implement OAuth for Spring Security. Shouldn't resources be used a little more economically?
Oct 28th, 2010, 10:50 AM
Yes. We're in the process of consolidating those libraries such that spring social will depend on spring oauth.
Oct 28th, 2010, 01:24 PM
Wonderful, that's good news.
Nov 9th, 2010, 11:31 AM
Spring Social has always depended on the official Spring Security OAuth project, it's never implemented its own OAuth library of any sort.
One thing Spring Social does support is the ability to use the Scribe OAuth 1.0 client library as an alternative, which could be preferred in a constrained resource environment such as Android phone due to its small footprint. Scribe is only ever enabled if it is present in your classpath and Spring Security OAuth is not.
Ryan, one thing you might want to consider in future versions of Spring Security OAuth is factoring out the server (provider) piece out from the client/consumer piece, so when the a OAuth client is needed in a mobile environment such as Android, the server piece wouldn't also be present.
Jul 21st, 2011, 06:33 AM
I am new to OAuth and Spring Social ; just wanted to understand how much of the authentication is taken care by Spring Social and how much the client (which uses SS) should do. In basic terms, is it possible to pass the username, password and list of permissions to Spring Social and have it return the accessToken (in case of FB) or should the client have the fb:login window which takes care of authenticating and redirecting to a specified URL with the accessToken which can then be passed to Spring for invoking the APIs. Please clarify.
Jul 21st, 2011, 06:22 PM
I think you'll probably have to take your question over to the spring social forum.
Powered by vBulletin® Version 4.2.1 Copyright © 2013 vBulletin Solutions, Inc. All rights reserved.