<div><br></div>
<p style="color: #A0A0A8;">On Friday, February 8, 2013 at 9:36 PM, Anil Saldhana wrote:</p>
<blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;">
<span><div><div><div>Hi All,</div><div> our release ninja, Pedro has released PicketBox 5.0.0.Final whose </div><div>notes is at <a href="https://docs.jboss.org/author/display/SECURITY/5.0.0.Final">https://docs.jboss.org/author/display/SECURITY/5.0.0.Final</a></div><div><br></div><div>We delayed the release mainly to accommodate PicketLink v3.0 IDM that </div><div>was under development. PicketBox5 uses the most recent version of IDM.</div></div></div></span></blockquote><div>Congratulation guys. </div><blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;"><span><div><div><div><br></div><div>==============</div><div>** What is PicketBox5? **</div><div>==============</div><div>PicketBox5 is a project that provides the various tools for Java Security.</div><div><a href="https://docs.jboss.org/author/display/SECURITY/SecurityProjectsArchitecture">https://docs.jboss.org/author/display/SECURITY/SecurityProjectsArchitecture</a></div><div><br></div><div>==================</div><div>** Are there quickstarts? **</div><div>==================</div><div><a href="https://docs.jboss.org/author/display/SECURITY/PicketBox+Quickstarts">https://docs.jboss.org/author/display/SECURITY/PicketBox+Quickstarts</a></div></div></div></span></blockquote><div>Looks like the quickstarts are referencing to the Pedro's repository, not PicketBox repository.</div><blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;"><span><div><div><div><br></div><div>==================</div><div>** Where is PicketBox5 useful? **</div><div>==================</div><div>Java Applications wherever the following are needed:</div><div>* Authentication.</div><div>* Authorization</div><div>* Audit</div><div>* Session Management (non-http based)</div><div>* Entitlements Management </div><div>(<a href="https://docs.jboss.org/author/display/SECURITY/EntitlementsManager">https://docs.jboss.org/author/display/SECURITY/EntitlementsManager</a>)</div><div><br></div><div>It does have general purpose HTTP authentication (basic/form/digest) </div><div>support that is not EE container security </div><div>driven.(<a href="https://docs.jboss.org/author/display/SECURITY/PicketBox+HTTP">https://docs.jboss.org/author/display/SECURITY/PicketBox+HTTP</a>)</div><div><br></div><div>=========================</div><div>** How is this different from PicketLink v3? **</div><div>=========================</div></div></div></span></blockquote><div>Here comes the tricky part to understand, at least for me. If I recall correctly PicketLink v3 is our </div><div>opportunity to build something new from the experience of Seam Security, PicketBox, GateIn, Resteasy….</div><div><br></div><div>Are we filling the gaps with PicketBox instead of provide the final solution? For example, picketlink provides something like this for me:</div><div><br></div><div><div>package org.picketlink.internal;</div><div><br></div><div>public class DefaultIdentity implements Identity….</div></div><div><br></div><div>On picketlink-extensions I have:</div><div><br></div><div>package org.picketlink.extensions.core.pbox;</div><div><br></div><div>public class DefaultPicketBoxIdentity extends DefaultIdentity implements PicketBoxIdentity…</div><div><br></div><div>It makes me confuse. Are we filling the gaps on PicketLink or creating workarounds inside something new?</div><div><br></div><blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;"><span><div><div><div>PicketLink v3 is our umbrella project for enabling security for JavaEE </div><div>applications (EE6+). PicketLinkv3 contains core security, IDM, SAML, </div><div>OAuth and Social (facebook/twitter/openid) components that are useful </div><div>for JavaEE applications. There is PicketLink Extensions project that </div><div>does use PicketBox5 underneath to fill in some of the gaps missing in </div><div>PicketLink v3, as we are transitioning features into PL3 based on user </div><div>demand. </div></div></div></span></blockquote><blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;"><span><div><div><div><br></div><div>Feedback welcome.</div><div><br></div><div>Now onto making PicketLink v3 Final release a reality. :)</div><div><br></div><div>Regards,</div><div>Anil</div><div>_______________________________________________</div><div>security-dev mailing list</div><div><a href="mailto:security-dev@lists.jboss.org">security-dev@lists.jboss.org</a></div><div><a href="https://lists.jboss.org/mailman/listinfo/security-dev">https://lists.jboss.org/mailman/listinfo/security-dev</a></div></div></div></span>
</blockquote>
<div>
<br>
</div>