Re: [jboss-as7-dev] Making Admin Console Accessible over HTTP API
On 3/9/11 12:26 PM, Max Rydahl Andersen wrote:
>>> Are you planning to use just the HTTP API or would you be
using the Native / Remoting API?
>>
>> HTTP
>
> For HTTP the complete set being considered is 'BASIC, Digest, Certificate i.e.
SSL and Kerberos/SPNEGO' - what are you using for your connections to the server?
There is quite a bit of client side support for all these mechanisms in Java already.
>
> http://download.oracle.com/javase/6/docs/technotes/guides/net/http-auth.html
okey - so we should be "safe" as long as we can find a good way to have the
user provide the credentials.
>> Haven't seen any good usecases for using the native/remote api yet.
>
> I don't think the HTTP side will be too difficult to support but using Remoting
will also automatically give you all of the supported mechanisms for the Native
connections.
More automatically than using the http auth api ?
The difference between native and http is that with native you get a
java API that does all of the protocol stuff for you. With the HTTP API,
you will have to do generate and parse JSON. For the web console we also
allow for encoded DMR messages over HTTP, although if you are using DMR,
thats about 80% of the java API.
--
Jason T. Greene
JBoss, a division of Red Hat