Restlet OAuth Extension is deprecated - will it be removed or replaced by something else?

restlet / restlet-framework-java

The first REST API framework for Java

https://restlet.talend.com

646 stars 284 forks source link

Restlet OAuth Extension is deprecated - will it be removed or replaced by something else? #1375

Closed markus-ki closed 3 years ago

markus-ki commented 3 years ago

Restlet changelog says that some extension will be removed with the next minor release. I could not find any information if the extension will be removed completely or reimplemented.

If the extension is no longer supported I have to search for another solution.

May somebody have more information about the current situation.

Original Post on StackOverflow.

cyberquarks commented 3 years ago

@markus-ki you may be interested in joining the "Unofficial Restlet Community" https://gitter.im/restlet-framework/community?utm_source=share-link&utm_medium=link&utm_campaign=share-link

jlouvel commented 3 years ago

Hi @markus-ki This extension won't be replaced. The rationale is that those security concerns are better handled by adding an API Gateway in front of your Restlet-based application, or deploy them inside a Service Mesh technology. Better separation of concerns, lighter Restlet Framework footprint, making it easier to evolve.