{
// TODO: put authorization in place to ensure this is a legit call. (i.e. supplied user has the supplied app
// installed.)
String userId = inActionContext.getPrincipal().getOpenSocialId();
String consumerKey = (String) inActionContext.getParams();
return new SecurityTokenResponse(new OAuthSecurityToken(userId, null, consumerKey, domain, container,
null, AuthenticationMode.OAUTH_CONSUMER_REQUEST.name()));
}