Example proxy with IETF Oauth2 token exchange spec

Not applicable

Hello,

I would like to know if there are example of proxy implementation that would support the following specification https://tools.ietf.org/html/draft-ietf-oauth-token-exchange-05

A first use-cases would be exposing the token exchange endpoints for a chain of backend applications (resource servers) that would need to propagate JWT tokens with end-user authentication, and during token exchanges change client_id, potentially scopes, and user delegation (e.g. a customer support user to act on behalf of a customer enduser).

Third party token doc could be somewhat related (http://docs.apigee.com/api-services/content/use-third-party-oauth-system ) and I wonder whether there is some document / sample / POC more directly related that could be shared.

Thanks in advance,

Guillaume.

0 1 764
1 REPLY 1

adas
New Member

There's an excellent example from @Dino in github. Please refer to that: https://github.com/apigee/iloveapis2015-jwt-jwe-jws