Introducing The ASF’s New Logo Read Now

Board history: Oltu

ASF Oak Leaf Icon

Oltu

What the board has decided about this committee or office, and the reports it filed, most recent first. Generated from the published minutes.

These categorised views are best effort. They are read from the published minutes by a program, and what it can attribute to a committee depends on how each resolution happens to be worded — so a page may be incomplete, and nothing here overrides the minutes themselves. The raw minutes are the source of truth.

Please note. The board approves the minutes of a meeting at the meeting after it, and they are published then - so the most recent meeting is not usually here. ASF Members can read the draft in the board's own repository until it is.

[raw] the published minutes, which are the record. [main index]

Appointments

Date Action Decided by
2013-01-16 Appointed Antonio Sanso the board, by resolution

Decisions

Date Decision Item Outcome
2018-03-21 Terminate the Apache Oltu Project special order approved
2013-01-16 Establish the Apache Oltu Project special order approved

Reports

2018-03-21 — Antonio Sanso

No report was submitted.

2018-02-21 — Antonio Sanso

No report was submitted.

@Jim: draft a resolution for the Attic for Oltu

2018-01-17 — Antonio Sanso

No report was submitted.

2017-12-20 — Antonio Sanso

No report was submitted.

2017-11-15 — Antonio Sanso

No report was submitted.

2017-10-18 — Antonio Sanso

DESCRIPTION Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorize access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES Apache Oltu 1.0 was released on March 3rd 2014. Release Apache Oltu
Auth2 JWT 1.0.3 on 13/02/2017

CURRENT ACTIVITY The activity of the project is really really low. One of the
reason is also due the fact OAuth is a protocol that is pretty stable. The
other reason is that the team members that are active are busy/demotivated.

I proposed to bring new blood in the PMC by rotating the Chair position but no
one seemed to be interested. I do not know if you want to consider the option
to move to attic or not. My personal view is that nobody of the current
PMC/committer has time/interest for this project anymore. Said that I guess
that Oltu might still used by someone out there. The problem is that even if
people created issues and even proposed patches nobody of us
(included myself) reacted to it.

COMMUNITY Last new addition tot the team are 2 PMC members: Stein Welberg and
Jasha Joachimsthal in June 2016  (13/06/2016)

ISSUES There are no issues requiring board attention at this time.

2017-09-20 — Antonio Sanso

No report was submitted.

2017-08-16 — Antonio Sanso

No report was submitted.

@Mark: pursue a report for Oltu

2017-07-19 — Antonio Sanso

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorize access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

Release Apache Oltu Auth2 JWT 1.0.3 on 13/02/2017


CURRENT ACTIVITY

The activity of the project is really really low. One of the reason is also
due the fact OAuth is a protocol that is pretty stable. The other reason is
that the team members that are active are busy/demotivated.

Said that lately we had an issue with the Jenkins build that have been sorted
out after few days. We release last module in February 2017.

In the last report in February some problem has been highlighted:

The last few months it has been awfully quiet (this might also be due the fact
the OAuth spec is stable). But not only, since we have some patches laying
around for a while

The release has not been finished. It seems some of the artifacts are not
synched correctly in https://www.apache.org/dist/oltu

The builds keep failing

As far as I know 2. and 3. are resolved now. But 1. still persists.

I proposed to bring new blood in the PMC by rotating the Chair position but no
one seemed to be interested.


COMMUNITY

Last new addition tot the team are 2 PMC members: Stein Welberg and Jasha
Joachimsthal in June 2016  (13/06/2016)


ISSUES

There are no issues requiring board attention at this time.

2017-06-21 — Antonio Sanso

No report was submitted.

2017-05-17 — Antonio Sanso

No report was submitted.

2017-02-27 — Antonio Sanso

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

Apache Oltu Oauth2 module version 1.0.2 was released June 20th 2016.

Apache Oltu Parent v4 was released June 20th 2016.


CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard. A stable version 1.0 was released on March 3rd 2014 and some minor
releases are going out regularly for bug fixing. Updated modules contained bug
fixing were released June 20th 2016 . Vote for releasing JWT 1.0.3 is in
progress.

At the moment we are working on JSON Web Encryption support ( OLTU-80 -
Implement JWE support for JWT IN PROGRESS ).
In a recent mail thread in private@ some important things have been pointed
out:

The last few months it has been awfully quiet (this might also be due the fact
the OAuth spec is stable). But not only, since we have some patches laying
around for a while

The release has not been finished. It seems some of the artifacts are not
synched correctly in https://www.apache.org/dist/oltu

The builds keep failing

One of the outcome was that embracing the Apache way of having new blood from
time to time we are going to rotate the VP for the project. Hence I proposed
to step down from my role of chair. Unluckily at the moment nobody seems to be
keen  to take this responsibility. For this reason I will keep my role of
chair for now.


COMMUNITY


We have voted two new PMC members: Stein Welberg and Jasha Joachimsthal in
June 2016   (13/06/2016)


ISSUES

There are no issues requiring board attention at this time.

2016-11-16 — Antonio Sanso

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014. Apache Oltu Oauth2 module
version 1.0.2 was released June 20th 2016. Apache Oltu Parent v4 was released
June 20th 2016.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard. A stable version 1.0 was released on March 3rd 2014 and some minor
releases are going out regularly for bug fixing. Updated modules contained bug
fixing were released June 20th 2016 . At the moment we are working on JSON Web
Encryption support ( OLTU-80 - Implement JWE support for JWT IN PROGRESS ).
In a recent mail thread in private@ some important things have been pointed
out: The last few months it has been awfully quiet (this might also be due the
fact the OAuth spec is stable). But not only, since we have some patches
laying around for a while The release has not been finished. It seems some of
the artifacts are not synched correctly in https://www.apache.org/dist/oltu
The builds keep failing
One of the outcome was that embracing the Apache way of having new blood from
time to time we are going to rotate the VP for the project.

COMMUNITY

We have voted two new PMC members: Stein Welberg and Jasha Joachimsthal in
June 2016   (13/06/2016)

ISSUES

There are no issues requiring board attention at this time.

2016-08-17 — Antonio Sanso

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

Apache Oltu Oauth2 module version 1.0.2 was released June 20th 2016.

Apache Oltu Parent v4 was released June 20th 2016.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard. A stable version 1.0 was released on March 3rd 2014 and some minor
releases are going out regularly for bug fixing. Updated modules contained bug
fixing were released June 20th 2016 . At the moment we are working on JSON Web
Encryption support (  OLTU-80 - Implement JWE support for JWT In Progress ).
Users activity is growing slowly but steadily (the user@ mailing list has got
new messages from new users). Lately we have been fixing a bunch of users
reported issues hence the new  release.

COMMUNITY

We have voted two new PMC members: Stein Welberg and Jasha Joachimsthal in
June 2016   (13/06/2016)

ISSUES

There are no issues requiring board attention at this time.

2016-05-18 — Antonio Sanso

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

Apache Oltu Oauth2 module version 1.0.1 was released September 24th 2015.

A vote is currently undergoing in order to release Oauth2 module version 1.0.2

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard. A stable version 1.0 was released on March 3rd 2014 and some minor
releases are going out regularly for bug fixing. A vote is currently
undergoing in order to release OAuth2 module version 1.0.2 . At the moment we
are working on JSON Web Encryption support ( OLTU-80 - Implement JWE support
for JWT In Progress ).
Users activity is growing slowly but steadily (the user@ mailing list has got
new messages from new users). We have got quite some feedbacks from users
(included patches). Lately we have been fixing a bunch of users reported
issues
(https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12314420&ver
sion=12334954) hence the new upcoming release.

COMMUNITY

PMC composition has not changed since graduation We have voted one new
committer Jasha Joachimsthal in January 2015  (31/01/2015)

Tommaso Teofili decided to go emeritus.

ISSUES

There are no issues requiring board attention at this time.

2016-02-17 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications.  OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

Apache Oltu Oauth2 module version 1.0.1 was released September 24th 2015

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard.

A stable version 1.0 was released on March 3rd 2014 and some minor releases
are going out regularly for bug fixing. The current intention is to extend the
coverage to the JWE (started in OLTU-80)

- Implement JWE support for JWT In Progress ). We completed the "Handling
  Cryptography" process (http://www.apache.org/dev/crypto.html) in
  OLTU-162 - Handling Cryptography within OLTU Release Resolved .

Users activity is growing slowly but steadily (the user@ mailing list has got
new messages from new users). We got quite some feedbacks from users (included
patches).  The answer from Oltu dev seems to be a bit slow though. The overall
coding activity is also slow. The reason might also be the fact the OAuth
specification is stable for a while (being an RFC) hence also the code is
stable. I have sent an email to dev@ in order to encourage people to engage
more on reported bugs. I will report next time with the outcome.


COMMUNITY

PMC composition has not changed since graduation
We have voted one new committer Jasha Joachimstha in January 2015
(31/01/2015)

ISSUES

There are no issues requiring board attention at this time.

2015-11-18 — Antonio Sanso

Board Report, Oltu PMC

Oltu PMC Chair: Antonio Sanso (asanso@apache.org<mailto:asanso@apache.org>)
Date: November 2015

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

Apache Oltu Oauth2 module version 1.0.1 was released September 24th 2015

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard. A stable version 1.0 was released on March 3rd 2014 and some minor
releases are going out regularly for bug fixing. The current intention is to
extend the coverage to the JWE part and potentially the JWK specification
(https://tools.ietf.org/html/rfc7517). Users activity is growing slowly but
steadily (the user@ mailing list has got new messages from new users). We got
quite some feedbacks from users (included patches). The answer from Oltu dev
seems to be a bit slow though. The overall coding activity is also slow. The
reason might also be the fact the OAuth specification is stable for a while
(being an RFC) hence also the code is stable.

COMMUNITY

PMC composition has not changed since graduation We have voted one new
committer Jasha Joachimstha in January 2015  (31/01/2015)

ISSUES

There are no issues requiring board attention at this time.

2015-09-16 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard.

A stable version 1.0 was released on March 3rd 2014. We plan to make a new
minor release soonish
( [https://issues.apache.org/jira/images/icons/issuetypes/task.png]
OLTU-171<https://issues.apache.org/jira/browse/OLTU-171>
- Release a new version of Oltu Open ). We have extended the coverage for the
IETF JOSE specifications
(that is strictly correlated to OAuth 2) as JWS
(https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-36). The
current intention is to extend the coverage to the JWE part. We got quite some
feedbacks from users (included patches). The answer from Oltu dev seems to be
a bit slow though. The overall coding activity is also slow. The reason might
also be the fact the OAuth specification is stable for a while (being an RFC)
hence also the code is stable.

COMMUNITY

PMC composition has not changed since graduation We have voted one new
committer Jasha Joachimsthal in January 2015  (31/01/2015)

ISSUES

There are no issues requiring board attention at this time.

2015-08-19 — Antonio Sanso

No report was submitted.

2015-06-17 — Antonio Sanso

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard.

A stable version 1.0 was released on March 3rd 2014. We plan to make a new
minor release soonish ( OLTU-171 - Release a new version of Oltu ( Open) ). We
have extended the coverage for the IETF JOSE specifications (that is strictly
correlated to OAuth 2) as JWS
(https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-36). The
current intention is to extend the coverage to the JWE part. Users activity is
growing slowly but steadily (the user@ mailing list has got new messages from
new users). We got some feedback from some users about our not too clear
documentation. Hence we are planning to improve this area. A presentation
about Apache Oltu was given for JUG Basel : "OAuth Hacks - A gentle
introduction to OAuth 2 and Apache Oltu"
(http://www.jug.ch/html/events/2015/oauth_hacks.html)

COMMUNITY

PMC composition has not changed since graduation We have voted one new
committer Jasha Joachimsthal in January 2015  (31/01/2015)

ISSUES

There are no issues requiring board attention at this time.

2015-05-20 — Antonio Sanso

No report was submitted.

@Sam: pursue a report for Oltu for next month

2015-03-18 — Antonio Sanso

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard.

A stable version 1.0 was released on March 3rd 2014. We have extended the
coverage for the IETF JOSE specifications (that is strictly correlated to
OAuth 2) as JWS
(https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-36). The
current intention is to extend the coverage to the JWE part. Users activity is
growing slowly but steadily (the user@ mailing list has got new messages from
new users). We got some feedback from some users about our not too clear
documentation.

Hence we are planning to improve this area.

COMMUNITY

PMC composition has not changed since graduation We have voted one new
committer Jasha Joachimstha in January 2015

ISSUES

There are no issues requiring board attention at this time.

2015-02-18 — Antonio Sanso

No report was submitted.

2014-11-19 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd 2014.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard.

A stable version 1.0 was released on March 3rd 2014. We have extended the
coverage for the IETF JOSE specifications (that is strictly correlated to
OAuth 2) as JWS
(https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-36). The
current intention is to extend the coverage to the JWE part.
Users activity is growing slowly but steadily (the user@ mailing list has got
new messages from new users). We got some feedback from some users about our
not too clear documentation.

Hence we are planning to improve this area.

COMMUNITY

PMC composition has not changed since graduation We have voted one new
committer since graduation (3rd March 2013)

ISSUES

There are no issues requiring board attention at this time.

2014-08-20 — Antonio Sanso

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard.

A stable version 1.0 was released on March 3rd. The current focus is on
extending the coverage for the IETF JOSE specifications e.g. JWS, JWE  (that
are strictly correlated to OAuth 2).
Users activity is growing slowly but steadily (the user@ mailing list has got
new messages from new users). We got some feedback from some users about our
not too clear documentation.

Hence we are planning to improve this area.


COMMUNITY

PMC composition has not changed since graduation. We have voted one new
committer since graduation.

ISSUES

There are no issues requiring board attention at this time.

2014-05-21 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications.
OAuth is a mechanism that allows users to authenticate and authorise access
by another party to resources they control while avoiding the need to share
their username and password credentials.

MILESTONES

Apache Oltu 1.0 was released on March 3rd.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard.

A stable version 1.0 was released on March 3rd. The current focus is on
extending the coverage for the IETF JOSE specifications e.g. JWS, JWE  (that
are strictly correlated to OAuth 2).

Users activity is growing slowly but steadily (the user@ mailing list has got
new messages from new users)

COMMUNITY

PMC composition has not changed since graduation
We have voted one new committer since graduation

ISSUES

There are no issues requiring board attention at this time.

2014-02-19 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

org.apache.oltu.commons 1.0 and org.apache.oltu.jose 1.0 were released on February 7th.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard.

New parts of the OAuth specification family (JOSE) have been released this
month. Soon we will release a stable version 1.0 of OAuth core.

Users activity is growing slowly but steadily (the user@ mailing list has
got new messages from potential new users)

COMMUNITY

PMC composition has not changed since graduation
We have voted one new committer since graduation

ISSUES

There are no issues requiring board attention at this time.

2013-11-20 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu OAuth2 0.31 was released on July 3rd.

CURRENT ACTIVITY

The core part of the project related to 'The OAuth 2.0 Authorization
Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a
standard. New parts of the OAuth specification family are currently under
development (JWT, JWS and OpenId Connect)

We got a contribution of the Apache Oltu logo that has now been included in
the website and in the Oltu demo.

Users activity is growing slowly but steadily (the user@ mailing list has
got new messages from potential new users)

COMMUNITY

PMC composition has not changed since graduation
We have voted one new committer since graduation

ISSUES

There are no issues requiring board attention at this time.

2013-08-21 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications.  OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they control
while avoiding the need to share their username and password credentials.

MILESTONES

Apache Oltu OAuth2 0.31 was released on July 3rd.

CURRENT ACTIVITY

The "After graduation tasks" are now completed.  Development activity has
been quite low lately but we have plan to implement OpenId Connect and JWT
specifications.  From the other hand users activity is growing slowly but
steadily (the user@ mailing list has got new messages from potential new
users)

COMMUNITY

PMC composition has not changed since graduation
We have voted one new committer since graduation

ISSUES

There are no issues requiring board attention at this time.

2013-05-15 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of
the OAuth v2.0 specifications.  OAuth is a mechanism that allows users
to authenticate and authorise access by another party to resources
they control while avoiding the need to share their username and
password credentials.

MILESTONES

Oltu graduated from the Apache Incubator on January 16, 2013. Since
then, there have been no new releases.

CURRENT ACTIVITY

The "After graduation tasks" are now completed. We have been following
the instruction as for
http://incubator.apache.org/guides/graduation.html#transfer We tracked
the steps in and https://issues.apache.org/jira/browse/AMBER-76 that
is now resolved The previous INFRA blocker
(https://issues.apache.org/jira/browse/INFRA-5777) about JIRA
migration has been solved.  All the JIRA issues are successfully
migrated.  development activity is healthy we started also to
implement OpenId Connect and JWT specifications, new contributors are
emerging as potential new committers; We have improved our demo webapp
module users activity is almost quiet.

COMMUNITY

PMC composition has not changed since graduation
We have voted one new committer since graduation

ISSUES

There are no issues requiring board attention at this time.

2013-04-17 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of the
OAuth v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they
control while avoiding the need to share their username and password
credentials.

MILESTONES

Oltu graduated from the Apache Incubator on January 16, 2013. Since
then, there have been no new releases.

CURRENT ACTIVITY

The "After graduation tasks" are about to be completed. We have been
following the instruction as for
http://incubator.apache.org/guides/graduation.html#transfer. We are
tracking our progress in https://issues.apache.org/jira/browse/INFRA-5772
and https://issues.apache.org/jira/browse/AMBER-76; The previous INFRA
blocker (https://issues.apache.org/jira/browse/INFRA-5777) about JIRA
migration has not been resolved. We successfully migrated all our issues
to the new OLTU's JIRA We have also migrated and updated the wiki and the
website development activity is healthy we started also to implement
OpenId Connect and JWT specifications, new contributors are emerging as
potential new committers; users activity is almost quiet.
COMMUNITY

PMC composition has not changed since graduation
ISSUES

There are no issues requiring board attention at this time.

2013-03-20 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of
the OAuth v2.0 specifications.  OAuth is a mechanism that allows users
to authenticate and authorise access by another party to resources
they control while avoiding the need to share their username and
password credentials.

MILESTONES

Oltu graduated from the Apache Incubator on January 16, 2013. Since
then, there have been no new releases.

CURRENT ACTIVITY

* the main activity at the moment is related to the "After graduation
tasks". We have been following the instruction as for
[http://incubator.apache.org/guides/graduation.html#transfer].

* We are tracking our progress in
[https://issues.apache.org/jira/browse/INFRA-5772] and
[https://issues.apache.org/jira/browse/AMBER-76];

* development is freezed because of
[https://issues.apache.org/jira/browse/INFRA-5777]; we would rather
continue tracking issues on AMBER as soon as possible in order to
avoid any confusion in our community; As long as we understood rename
of a JIRA project is not possible but it would be nice to have at
least a new JIRA project named OLTU.

* we have been discussing the possible synergy between Apache Oltu and
other Apache projects (e.g. CXF)

* development activity is healthy, new contributors are emerging as
potential new committers;

* users activity is almost quiet.

COMMUNITY

* PMC composition has not changed since graduation.
* We have voted a new committer : Stein Welberg

ISSUES

There are no issues requiring board attention at this time.

2013-02-20 — Antonio Sanso

DESCRIPTION

Oltu is a project to develop a Java library which provides an API
specification for, and an unconditionally compliant implementation of
the OAuth v2.0 specifications.  OAuth is a mechanism that allows users
to authenticate and authorise access by another party to resources
they control while avoiding the need to share their username and
password credentials.

MILESTONES

Oltu graduated from the Apache Incubator on January 16, 2013. Since then,
there have been no new releases.

CURRENT ACTIVITY

- the main activity at the moment is related to the "After graduation tasks".
  We have been following the instruction as for
  http://incubator.apache.org/guides/graduation.html#transfer.
  We are tracking our progress in
  https://issues.apache.org/jira/browse/INFRA-5772 and
  https://issues.apache.org/jira/browse/AMBER-76;
- development is freezed because of
  https://issues.apache.org/jira/browse/INFRA-5777; we would rather
  continue tracking issues on AMBER as soon as possible in order to
  avoid any confusion in our community;
- we have been discussing to widen a bit the scope of Oltu in order to
  provide Open Id Connect support, some implementation around this has
  already started;
- development activity is healthy, new contributors are emerging as
  potential new committers;
- users activity is almost quiet.

COMMUNITY

- PMC composition has not changed since graduation.
- Committers composition has not changed since graduation.

ISSUES

There are no issues requiring board attention at this time.

2012-11-21 — as Amber, in the Incubator's report

Amber has been incubating since July 2010. Amber is a project to develop
a Java library which provides an API specification for, and an unconditionally
compliant implementation of the OAuth v1.0, v1.0a and v2.0 specifications.
OAuth is a mechanism that allows users to authenticate and authorise access
by another party to resources they control while avoiding the need to share
their username and password credentials.

A list of the three most important issues to address in the move towards
graduation

  - Attract users and developers
  - Start to execute the graduation plan

Any issues that the Incubator PMC (IPMC) or ASF Board wish/need to be aware of?

  - No particularly issues at the moment

How has the community developed since the last report?

  New users / devs show up on the mailing lists both contributing patches and
  asking for guidance/release.

How has the project developed since the last report

  After the Amber first release (amber-0.22-incubating) seems that the
  community has taken a little hiatus. Next challenge is to comply against
  the just released RFC 6749 (http://tools.ietf.org/html/rfc6749). Since the
  last report we fixed some issues for aligning with latest OAuth
  specification.

Signed-off-by: wave (as shepherd)
IPMC comments:
  wave: I think that Amber is ready to graduate - the traffic on the ML is
        down but indicates that some might use Amber if it were a TLP. I see
        starts to the process, I think that the mentors just need to give the
        podling some nudges. Some status updates to the mentor lists and
        sign-offs are in order as well.

2012-08-15 — as Amber, in the Incubator's report

Amber has been incubating since July 2010. Amber is a project to develop
a Java library which provides an API specification for, and an
unconditionally
compliant implementation of the OAuth v1.0, v1.0a and v2.0 specifications.
OAuth is a mechanism that allows users to authenticate and authorise access
by another party to resources they control while avoiding the need to share
their username and password credentials.

A list of the three most important issues to address in the move towards
graduation

- Attract users and developers
- Start to think about a  graduation plan

Any issues that the Incubator PMC (IPMC) or ASF Board wish/need to be aware
of?

No particularly issues at the moment

How has the community developed since the last report?

New users / devs show up on the mailing lists both contributing patches
and asking for guidance/release

Fraunhofer AISEC decided to donate their UMA implementation based on
OAuth 2.0
(http://kantarainitiative.org/confluence/display/uma/Fraunhofer+AISEC+Implementation+FAQ)
to Amber (see AMBER-57). Amber PPMCs are evaluating how to move forward.

How has the project developed since the last report

- The legal issue that slowed down the project significantly has been
  finally solved, see LEGAL-134
- Fixed a bunch of issues for aligning with latest OAuth specification
- amber-0.22-incubating (Amber first release) has been officially approved
  and ready to be used.

Signed-off-by: Raymond Feng (rfeng), mfranklin, jukka
IPMC comments:
mfranklin: Everything looks good with community & project. Status page needs
          to be updated and all items signed off before graduation.
   jukka: Congratulations on the release and especially on successfully
          navigating through the legal issue!

2012-05-16 — as Amber, in the Incubator's report

Amber has been incubating since July 2010. Amber is a project to develop
a Java library which provides an API specification for, and an unconditionally
compliant implementation of the OAuth v1.0, v1.0a and v2.0 specifications.
OAuth is a mechanism that allows users to authenticate and authorise access
by another party to resources they control while avoiding the need to share
their username and password credentials.

A list of the three most important issues to address in the move towards
graduation

- Clarify status of code grant
- Attract users and developers
- Generate a release

Any issues that the Incubator PMC (IPMC) or ASF Board wish/need to be aware of?

- We need copyright signoff from University of Newcastle or some guidance
  on how to proceed.

How has the community developed since the last report?

- Raymond Feng joined in as a mentor
- New users / devs show up on the mailing lists both contributing patches
  and asking for guidance/release

How has the project developed since the last report

- an attempt to clarify the legal issue is on going see LEGAL-134
- Fixed a bunch of issues for aligning with latest OAuth specification

Signed off by mentor: rfeng

2012-02-15 — as Amber, in the Incubator's report

Amber has been incubating since July 2010. Amber is a project to develop
a Java library which provides an API specification for, and an
unconditionally compliant implementation of the OAuth v1.0, v1.0a and v2.0
specifications.  OAuth is a mechanism that allows users to authenticate and
authorise access by another party to resources they control while avoiding the
need to share their username and password credentials.

A list of the three most important issues to address in the move towards
graduation

- Clarify status of code grant
- Attract users and developers
- Generate a release

Any issues that the Incubator PMC (IPMC) or ASF Board wish/need to be aware
of?

- We need copyright signoff from University of Newcastle

How has the community developed since the last report?

- Antonion Sanso joined in as a new committer and PPMC member
- Raymond Feng has expressed his availability to join as a mentor
- Simone Tripodi, Amber 'father' joined back (he'd gone emeritus before)

How has the project developed since the last report?

- Fixed a bunch of issues for aligning with latest OAuth specification
- Updated and improved Amber website also to face T requirements

Signed off by mentor:

2011-12-21 — as Amber, in the Incubator's report

Amber has been incubating since July 2010. Amber is a project to develop a
Java library which provides an API specification for, and an unconditionally
compliant implementation of the OAuth v1.0, v1.0a and v2.0 specifications.
OAuth is a mechanism that allows users to authenticate and authorise access
by another party to resources they control while avoiding the need to share
their username and password credentials.

The most important issues that must be addressed before graduation are:

- Clarify status of code grant
- Attract users and developers
- Generate a release

The Incubator PMC / ASF Board should be aware that:

- Community activity is relatively low
- We need copyright signoff from University of Newcastle

How has the community developed since the last report

- New users / devs show up on the mailing lists both contributing patches
and asking for guidance/release

How has the project developed since the last report

- The old trunk has been moved to a branch amber-0.10 which reflects OAuth
0.10 spec
- The new trunk is being updated to latest 0.22 spec version
- Versions of artifacts have been aligned to the supported OAuth
specification supported
- Discussion about preparing for an initial release is ongoing

2011-12-21 — as Amber, in the Incubator's report

DID NOT REPORT

2011-11-16 — as Amber, in the Incubator's report

DID NOT REPORT

2011-08-17 — as Amber, in the Incubator's report

Amber has been incubating since July 2010. Amber is a project to develop a
Java library which provides an API specification for, and an unconditionally
compliant implementation of the OAuth v1.0, v1.0a and v2.0 specifications.
OAuth is a mechanism that allows users to authenticate and authorise access
by another party to resources they control while avoiding the need to share
their username and password credentials.

The most important issues that must be addressed before graduation are:

- Clarify status of code grant
- Attract users and developers
- Generate a release

The Incubator PMC / ASF Board should be aware that:

- Community activity is relatively low

How has the community developed since the last report

- Some users have started asking for help or getting started guides on the
mailing list

How has the project developed since the last report

- Work has begun on updating the OAuth implementation
- Discussion about preparing for an initial release is ongoing

2011-05-19 — as Amber, in the Incubator's report

Amber has been incubating since July 2010. Amber is a project to develop a
Java library which provides an API specification for, and an unconditionally
compliant implementation of the OAuth v1.0, v1.0a and v2.0 specifications.
OAuth is a mechanism that allows users to authenticate and authorise access
by another party to resources they control while avoiding the need to share
their username and password credentials.

The most important issues that must be addressed before graduation are:

 - Attract users and developers
 - Generate a release

The Incubator PMC / ASF Board should be aware that:

 - Community activity is relatively low

How has the community developed since the last report

 - Some users have started asking for help or getting started guides on the
mailing list

How has the project developed since the last report

 - Fixed some bugs
 - Removed LGPL licensed files from website

2011-02-16 — as Amber, in the Incubator's report

Amber has been incubating since July 2010. Amber is a project to
develop a Java library which provides an API specification for, and an
unconditionally compliant implementation of the OAuth v1.0, v1.0a and
v2.0 specifications. OAuth is a mechanism that allows users to
authenticate and authorise access by another party to resources they
control while avoiding the need to share their username and password
credentials.

The most important issues that must be addressed before graduation are:

* Attract users and developers
* Generate a release

The Incubator PMC / ASF Board should be aware that:

* Community activity is relatively low

How has the community developed since the last report

* Two new committers have joined the project, after contributing some code

How has the project developed since the last report

* An OAuth 2.0 implementation called Leeloo has been contributed to the project
* OAuth 1.0 code previously contributed, has been integrated with the project

Subscribe to ASF Plus One, Our Monthly Newsletter

Subscribe Now