opscode/oc-id — pull request #25 by jamesc (2014-09-26 23:30:53+00:00)
Title: Jc/resource owner from cert

This uses mixlib-authentication to validate a request for a bearer token with standard header-based authentication. This is implemented using the resource owner password grant flow from OAuth2. We ignore the username/password if they're supplied and just look at the Chef generated headers

e.g. using knife raw:
```
> knife raw -s "https://api.example.com" -m POST "id/oauth/token?grant_type=password"
{
"access_token": "e71b2b557866792202af88e11ac47e00a6a88cfedb7d83e4570ebfb7e4ab5178",
"token_type": "bearer",
"expires_in": 7200,
"refresh_token": "c30de5db045d908231ddf376b1bcac1f93da8c9714d0c42c6fc854b279230374"
}
```