spring-attic/sagan

API Support for Bearer Tokens

rwinch opened this issue · 2 comments

The API currently supports HTTP Basic with username/token. Using HTTP Basic is a non-standard way of providing the OAuth token. The username for HTTP Basic is not used and is additional unnecessary information that must be provided. Instead, support for Bearer tokens should be provided.

FWIW...you should be able to do this by adding BearerTokenAuthenticationFilter to the HttpSecurity and injecting the existing GitHubAuthenticationManager into it.

Do you have HttpSecurity API,Can you send me a copy?