Hi peeps, I was chatting with Kris and Matthias about how interesting would be the addition of Basic/Digest authentication for Android, iOS and JS. The initial feeling is basic -> easy to add, digest -> tricky. Both methods are weak for security, but we still have developers dealing with the legacy and make their lives less painful would be nice. Wdyt? -- "The measure of a man is what he does with power" - Plato - @abstractj - Volenti Nihil Difficile _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/aerogear-dev

let's start with basic, and add a WARNING :)

digest can be added if really really required

On Tue, Apr 09, 2013 at 06:56:37PM +0200, Matthias Wessendorf wrote: > let's start with basic, and add a WARNING :) +1, having basic auth is a must, with a huge warning to use it only over https ;) > digest can be added if really really required What about adding JIRAs and putting them on the lowest priority? If there's votes for it... -- qmx _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org (mailto:aerogear-dev@lists.jboss.org) https://lists.jboss.org/mailman/listinfo/aerogear-dev

On Tue, Apr 09, 2013 at 02:36:35PM -0300, Bruno Oliveira wrote: > We have jiras for JS https://issues.jboss.org/browse/AEROGEAR-1086 and https://issues.jboss.org/browse/AEROGEAR-1087 > > Wdyt about a Jira umbrella for basic on iOS, Android and JS and the same approach for digest? +1 go for it -- qmx _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org (mailto:aerogear-dev@lists.jboss.org) https://lists.jboss.org/mailman/listinfo/aerogear-dev

In theory it should be supported by the under lying connection libraries and exposing it shouldn't be a bit problem Sent from my Android phone using TouchDown (www.nitrodesk.com) -----Original Message----- From: Bruno Oliveira [bruno(a)abstractj.org] Received: Tuesday, 09 Apr 2013, 12:50PM To: AeroGear Developer Mailing List [aerogear-dev(a)lists.jboss.org] Subject: [aerogear-dev] Basic/Digest APIs on the client side, doable? Hi peeps, I was chatting with Kris and Matthias about how interesting would be the addition of Basic/Digest authentication for Android, iOS and JS. The initial feeling is basic -> easy to add, digest -> tricky. Both methods are weak for security, but we still have developers dealing with the legacy and make their lives less painful would be nice. Wdyt? -- "The measure of a man is what he does with power" - Plato - @abstractj - Volenti Nihil Difficile _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/aerogear-dev _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/aerogear-dev