OAuth 提供程序库 (Java) [英] Library for OAuth Provider (Java)

问题描述

我正在寻找可帮助我构建 OAuth 提供程序的 Java 库.我必须能够接收 OAuth 签名的请求并确定它们是否有效(检查签名、时间戳和现时值).

I'm looking for a Java library that helps me building an OAuth Provider. I must be able to receive OAuth signed requests and determine whether they are valid or not (checking the signature, timestamp and nonce values).

你知道是否有什么东西可以让这个任务更容易吗?

Do you know if there's something out there that makes this task easier?

推荐答案

Scribe 是 Java 的 OAuth 库，由提问者自己编写.;-)

Scribe is an OAuth library for Java, written by the asker himself. ;-)

注意:我将其发布在这里作为答案，以便其他谷歌员工可以选择替代方案.对于另一个基于库的替代方案，请参阅我的另一个答案Jersey OAuth 签名库".

Note: I post this here as an answer so that other googlers have a choice of alternatives. For another library-based alternative, see my other answer "Jersey OAuth signature library".

一些说明用法的代码:

OAuthService service = new ServiceBuilder()
                                  .provider(TwitterApi.class)
                                  .apiKey("your_api_key")
                                  .apiSecret("your_api_secret")
                                  .build();
...
Token requestToken = service.getRequestToken();
String your_token = requestToken.getToken();
...
Verifier verifier = new Verifier("your_previously_retrieved_verifier");
 Token accessToken = service.getAccessToken(requestToken, verifier);

创建请求:

OAuthRequest request = OAuthRequest(Verb.GET, "http://api.twitter.com/1/direct_messages.json");
service.signRequest(accessToken, request);
Response response = request.send();

这篇关于OAuth 提供程序库 (Java)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！