blazkaro / fapiserver Goto Github PK

I'm currently working on CIBA. I have created request validator and a piece of handler, but I see that some breaking changes must be done.
The 'AuthorizationHandler' class must be redesigned, because it was created to work with, as name says, authorization endpoint. To adapt it to CIBA this class must be fundamentally refactored. I'm planning to create something like base authorization handler, which will handle the core of authorization (no validation performed, no persistence, working on independant from authorization models etc.), and then classes that inherit from it - handler for authorization endpoint and CIBA. The InteractionService also have to be redesigned, because it was created to work with authorization endpoint based approach.

The token introspection and revocation currently is not working properly due to problems with serialization. I will fix it as soon as possible.