Re: [infinispan-dev] Securing access to Infinispan REST server

I've actually been interested in how to run the REST server from within my app without the use of a web server. That is, I don't want to deploy a WAR. A solution to this authentication problem might take into account scenarios in which the server is embedded and not running in a servlet container.

-jeff On Tue, Jul 6, 2010 at 2:29 AM, Manik Surtani <manik(a)jboss.org&gt; wrote: > Front it with a webserver and let the webserver handle security? > > > On 6 Jul 2010, at 09:31, Galder Zamarreño wrote: > >> Hi, >> >> During my REST/Cloud presentation, I got a particularly interesting question about the Infinispan REST server. >> >> As it is, once the REST module is deployed, anyone can access it as shown in http://community.jboss.org/wiki/AccessingdatainInfinispanviaRESTfulinterface >> >> Now, how would you go about authentication/authorization to access Infinispan via REST? >> >> Since at the end of the day the REST module is a war, users would need to tweak it accordingly in order to configure the security constraints under its web.xml defining the corresponding roles and authentication methods. Wouldn't they? >> >> I don't think it's possible for Infinispan to provide a more restricted Infinispan REST module, but instead some guidelines on how to secure it would be handy. >> >> Thoughts? >> -- >> Galder Zamarreño >> Sr. Software Engineer >> Infinispan, JBoss Cache >> >> >> _______________________________________________ >> infinispan-dev mailing list >> infinispan-dev(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/infinispan-dev > > -- > Manik Surtani > manik(a)jboss.org > Lead, Infinispan > Lead, JBoss Cache > http://www.infinispan.org > http://www.jbosscache.org > > > > > > _______________________________________________ > infinispan-dev mailing list > infinispan-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/infinispan-dev > _______________________________________________ infinispan-dev mailing list infinispan-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/infinispan-dev