(apologize for the cross post...)

Hi all,

The Apache Amber Team is pleased to announce the release of Apache
Amber 0.22-incubating!

Apache Amber component is a lightweight yet powerful Java library that
allows users adopt the OAuth protocol in both Client/Server side.

This is the first release under the Incubator of the Apache Software
Foundation and contains a number of improvements and bug fixes:

Sub-task

  [AMBER-2] - Request User accounts from Infra

Bug

  [AMBER-5] - Design of server API
  [AMBER-14] - [oauth2-rs-filter] comma-separated oauth.rs.tokens
isn't parsed properly
  [AMBER-17] - Remove GPL code from Amber code base
  [AMBER-28] - OAuthAccessResourceRequest and extractors using old
version of spec to find access token
  [AMBER-29] - OAUTH_HEADER_NAME needs to be updated to latest spec
  [AMBER-30] - CodeValidator needs to be updated to latest spec
  [AMBER-31] - End User Authorization Endpoint (namely
OAuthAuthzRequest) needs to be updated to latest spec
  [AMBER-33] - Grant types need to be updated to latest spec
  [AMBER-34] - Fix the pom.xml so that we can run mvn eclipse:eclipse
  [AMBER-38] - AuthorizationCodeValidator needs to be updated to latest spec
  [AMBER-45] - Authorization Response needs to be updated to latest spec
  [AMBER-47] - Update OAuthError class using the error code as for
version 22 of the spec
  [AMBER-53] - "expires_in" field in JSON responses should be a number
not a string

Improvement

  [AMBER-16] - HttpServletRequest.getRemoteUser() should return the
name of the security principal, not null.
  [AMBER-18] - Site template is missing some Javascript, as a result
of fix for AMBER-17
  [AMBER-21] - Update dynamic client registration module to be
compliant with the OAuth Dynamic Client Registration Protocol - PUSHED
metadata
  [AMBER-26] - OAuthAuthzRequest does not contain getState() method
  [AMBER-35] - Add a shutdown method to OAuthClient/HttpClient to
allow graceful release of resources
  [AMBER-36] - Add support for token_type and make sure state is
passed back from the URL fragment for the callback
  [AMBER-37] - Specify the CI url inside the Maven POM
  [AMBER-40] - Unify maven version id's for all artifacts in Amber
  [AMBER-42] - Update amber based on the latest oauth 2.0 draft v22
  [AMBER-43] - Missing OAuth parameter is ambiguous for a resource request
  [AMBER-44] - Add method to OAuthClient that allows sending GET
request to OAuth token endpoint
  [AMBER-48] - Resource Server module extension

New Feature

  [AMBER-1] - Setting up Amber project
  [AMBER-11] - OAuth 2.0 Client from leeloo
  [AMBER-12] - OAuth 2.0 server code from leeloo

Task

  [AMBER-10] - Refactor project structure to welcome Leelo
  [AMBER-23] - Update svn:ignore property to ignore target folder and
eclipse project files
  [AMBER-39] - Create a branch for OAuth draft-10 implementation
  [AMBER-55] - Move Amber OAuth 1.0 related modules to attic


Apache Amber is available in source form from the following download
page (waiting for the repos sync at the time of writing):

    http://incubator.apache.org/amber/download.html


When downloading from a mirror site, please remember to verify the
downloads using signatures found on the Apache site:

    http://www.apache.org/dist/incubator/amber/KEYS


Apache Amber is also available in binary form or for use using Maven 2
from the Central Maven Repository:

    http://repo1.maven.org/maven2/org/apache/amber/


For more information on Apache Amber, visit the project home page:

    http://incubator.apache.org/amber/

- Simo, on behalf of the Apache Amber community

http://people.apache.org/~simonetripodi/
http://simonetripodi.livejournal.com/
http://twitter.com/simonetripodi
http://www.99soft.org/

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Reply via email to