We definitely need a way how get bearer token from auth server without a form
popping out if we are going to remove HTTP Basic. UPS is supposed to be used
also by other applications using REST endpoints apart from Admin UI. E.g. you
want to show all iOS installations on variant FooBar in your own dashboard
application.
Sender is the same case, your application might want to send a message via UPS.
It might be using either JavaSender or direct REST calls. Ability to authorize
your app non-interactively is crucial here.
Karel
On Mon, 16 Jun 2014 19:06:48 -0300
Bruno Oliveira <bruno(a)abstractj.org> wrote:
Good morning peeps,
First I would like to thank Bill Burke, Stian, Sebastien and Lukas for
dedicating their time helping with Keycloak integration.
I think we are almost done, this is the current branch:
https://github.com/abstractj/aerogear-unifiedpush-server/tree/keycloak.js.
And now most of issues were gone and is also possible to display the current
logged in user.
Now I'm working on fix the sender endpoint, to be more precise we need
to remove the HTTP basic authentication for sending push messages
now that most of the endpoints are protect by Keycloak. If you try to
send a push message based on my branch you will see the basic
authentication form atm.
If you have a better idea, I'm all ears.
--
abstractj
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev