Board Report, Oltu PMC
Oltu PMC Chair: Antonio Sanso (asanso@apache.org)
Date: November 2016
DESCRIPTION
Oltu is a project to develop a Java library which provides an API specification for, and an unconditionally compliant implementation of the OAuth v2.0 specifications.
OAuth is a mechanism that allows users to authenticate and authorise access by another party to resources they control while avoiding the need to share their username and password credentials.
MILESTONES
Apache Oltu 1.0 was released on March 3rd 2014.
Apache Oltu Oauth2 module version 1.0.2 was released June 20th 2016.
Apache Oltu Parent v4 was released June 20th 2016.
CURRENT ACTIVITY
The core part of the project related to 'The OAuth 2.0 Authorization Framework' (RFC 6749) is pretty stable due the fact RFC 6749 is now a standard.
A stable version 1.0 was released on March 3rd 2014 and some minor releases are going out regularly for bug fixing. Updated modules contained bug fixing were released June 20th 2016 . At the moment we are working on JSON Web Encryption support ( 
OLTU-80 - Implement JWE support for JWT IN PROGRESS ).
In a recent mail thread in private@ some important things have been pointed out:
The last few months it has been awfully quiet (this might also be due the fact the OAuth spec is stable). But not only, since we have some patches laying around for a while
The release has not been finished. It seems some of the artifacts are not synched correctly in https://www.apache.org/dist/oltu
The builds keep failing
One of the outcome was that embracing the Apache way of having new blood from time to time we are going to rotate the VP for the project.
COMMUNITY
We have voted two new PMC members: Stein Welberg and Jasha Joachimsthal in June 2016 (13/06/2016)
ISSUES
There are no issues requiring board attention at this time.