Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.

Board Report, Oltu PMC

Oltu PMC Chair: Antonio Sanso (
Date: November 2016


Oltu is a project to develop a Java library which provides an API specification for, and an unconditionally compliant implementation of the OAuth v2.0 specifications.
OAuth is a mechanism that allows users to authenticate and authorise access by another party to resources they control while avoiding the need to share their username and password credentials.


Apache Oltu 1.0 was released on March 3rd 2014.

Apache Oltu Oauth2 module version 1.0.2 was released June 20th 2016.

Apache Oltu Parent v4 was released June 20th 2016.


The core part of the project related to 'The OAuth 2.0 Authorization Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a standard.
A stable version 1.0 was released on March 3rd 2014 and some minor releases are going out regularly for bug fixing. Updated modules contained bug fixing were released June 20th 2016 . At the moment we are working on JSON Web Encryption support ( Image AddedOLTU-80 - Implement JWE support for JWT IN PROGRESS ).  
In a recent mail thread in private@ some important things have been pointed out:

  • The last few months it has been awfully quiet (this might also be due the fact the OAuth spec is stable). But not only, since we have some patches laying around for a while

  • The release has not been finished. It seems some of the artifacts are not synched correctly in

  • The builds keep failing 

One of the outcome was that embracing the Apache way of having new blood from time to time we are going to rotate the VP for the project.



We have voted two new PMC members: Stein Welberg and Jasha Joachimsthal in June 2016   (13/06/2016)


There are no issues requiring board attention at this time.