Customize an OAuth provider

The WebSphere Application Server OAuth service provider has plug-in points for customization. We can replace the default form login page for user authentication, or develop our own user consent form to collect client authorization data. WebSphere Application Server OAuth providers also allow customized post processing for major events in OAuth token issuing using mediators.

Subtopics

• Custom mediator
  An OAuth 2.0 mediator is used as a callback during the OAuth 2.0 message processing to perform customized post processing.

• Custom consent form template
  The OAuth authorization server provides a template to acquire user consent information about which OAuth clients are authorized to access the protected resource in given scopes. The authorization request from the OAuth client includes a list of requested scopes from the template.

• Custom user login form
  The WebSphere Application Server OAuth service provider includes a form login page for a user to submit a user name and password.

Parent topic: OAuth

Tasks:

Configure a custom form login page