search

openservicebrokerapi / servicebroker

Open Service Broker API Specification
https://openservicebrokerapi.org/
Apache License 2.0
1.19k stars 433 forks source link

Open Service Broker Example: following OAuth #716

Closed joshianurag21 closed 4 years ago

joshianurag21 commented 4 years ago

What is the problem? Need a sample (example) of service broker which follows Oauth for Auth. Most of the sample brokers are following basic auth only.

Who does this affect? N/A

Do you have any proposed solutions? N/A

Additional context Just exploring service brokers, from blog (https://www.openservicebrokerapi.org/category/blog) came to know that non-basic auth is also supported for service broker. But didn't get any sample broker following this, most of them follow basic auth.

Samze commented 4 years ago

Hi @joshianurag21 thanks for the question.

The Google Service Broker takes advantage of the bearer token support we have in the specification and uses a flavour of oauth to authentication with Google's Services.

There is also a proposal to bring a more formal method of doing OAuth between Platforms and Brokers.

joshianurag21 commented 4 years ago

Hi @Samze thanks for the response. Proposal looks good, any idea when this would be available as specification.

Samze commented 4 years ago

@joshianurag21 there is no timeline for it right now. Since the specification does support OAuth flow out-of-band today, does this support what you are trying to achieve?