[undertow-dev] When DIGEST support?

[Jason Greene]

On Jun 11, 2013, at 12:26 PM, Anil Saldhana <Anil.Saldhana at redhat.com> wrote:

> On 06/11/2013 07:58 AM, Anil Saldhana wrote:
>> 
>> On Jun 11, 2013, at 7:23 AM, Jason Greene <jgreene at redhat.com> wrote:
>> 
>>> Hmm I guess that means we need a picketlink IDM subsystem?
>> We have a subsystem ready.
> https://docs.jboss.org/author/display/PLINK/PicketLink+Subsystem
> Feedback welcome.

I like the typed syntax, but I do not like the fact this is using JPA over JDBC. It's going to create a dependency mess (now all wildfly distributions that want to use database auth will require Java EE), and it will slow server initialization for very little gain.

>> 
>>> Long term we need to support domains because EAP 6.3 (next year) is likely to pull in undertow as an optional server.
>>> 
>>> Short term I think it depends on whether or not any of the TCKs need it
>>> 
>>> On Jun 11, 2013, at 5:18 AM, Darran Lofthouse <darran.lofthouse at jboss.com> wrote:
>>> 
>>>> Hello all,
>>>> 
>>>> The changes to enable DIGEST authentication for deployed web
>>>> applications when backed by the default security realm are almost
>>>> complete, had a slight build issue yesterday but testing this today.
>>>> 
>>>> Bearing in mind that our longer term plans are to back everything with
>>>> PicketLink IDM do we see any benefit in getting this to work now with
>>>> JAAS security domains as well?
>>>> 
>>>> i.e. Out of the box Digest will work in WildFly 8 as long as
>>>> authentication is delegated to the realm.
>>>> 
>>>> Regards,
>>>> Darran Lofthouse.
>>>> 
>>>> 
>>>> On 04/06/13 12:17, Darran Lofthouse wrote:
>>>>> The servlet side is on it's way.  We had some outstanding IDM
>>>>> integration issues to consider and I will have a small change to
>>>>> contribute to PicketBox to restore the integration with the JAAS domains.
>>>>> 
>>>>> (The reason it is in for domain management is because the
>>>>> CallbackHandlers were easier to map to)
>>>>> 
>>>>> Regards,
>>>>> Darran Lofthouse.
>>>>> 
>>>>> 
>>>>> On 03/06/13 22:17, Jason Greene wrote:
>>>>>> Hmm there must be some issue or incomplete servlet integration because our management stuff uses Digest all of the place. I'll look into it.
>>>>>> 
>>>>>> On Jun 3, 2013, at 4:07 PM, Bill Burke <bburke at redhat.com> wrote:
>>>>>> 
>>>>>>> https://issues.jboss.org/browse/UNDERTOW-34
>>>>>>> 
>>>>>>> DONE?
>>>>>>> 
>>>>>>> On 6/3/2013 4:31 PM, Bill Burke wrote:
>>>>>>>> Damn, *bleepin* JAX-RS TCK has a test that requires DIGEST auth.  When
>>>>>>>> will Undertow in Wildfly support it?  Before the next Wildfll Alpha
>>>>>>>> would be nice.
> 
> _______________________________________________
> undertow-dev mailing list
> undertow-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/undertow-dev

--
Jason T. Greene
WildFly Lead / JBoss EAP Platform Architect
JBoss, a division of Red Hat