[JBoss JIRA] (ELY-473) True credential forwarding support
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-473?page=com.atlassian.jira.plugin.sy... ]
Darran Lofthouse updated ELY-473:
---------------------------------
Fix Version/s: 1.1.0.Beta6
(was: 1.1.0.Beta5)
> True credential forwarding support
> ----------------------------------
>
> Key: ELY-473
> URL: https://issues.jboss.org/browse/ELY-473
> Project: WildFly Elytron
> Issue Type: Enhancement
> Reporter: David Lloyd
> Priority: Minor
> Fix For: 1.1.0.Beta6
>
>
> Now we are ready for true support for forwarding credentials.
> The credentials should be associated with the SecurityIdentity itself. A permission check is required to acquire them (maybe even both a code permission check *and* a user authorization check).
> We could support holding one credential per type+algorithm combination, or simply a list of credentials which can be queried.
> Authentication client API should be enhanced to search a security domain's current identity for a forwarding credential to use.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
10 years, 1 month
[JBoss JIRA] (ELY-469) A HTTP mechanism needs the ability to write the response.
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-469?page=com.atlassian.jira.plugin.sy... ]
Darran Lofthouse updated ELY-469:
---------------------------------
Fix Version/s: 1.1.0.Beta6
(was: 1.1.0.Beta5)
> A HTTP mechanism needs the ability to write the response.
> ---------------------------------------------------------
>
> Key: ELY-469
> URL: https://issues.jboss.org/browse/ELY-469
> Project: WildFly Elytron
> Issue Type: Feature Request
> Components: HTTP
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Fix For: 1.1.0.Beta6
>
>
> A mechanism either needs to be able to write the content of the response directly, or we need to be able to provide an OutputStream the mechanism can write to so we can cache it's output and subsequently use it.
> I think direct access should be sufficient but would need to be first wins - by the time the mechanisms are sending their challenge we already know the response is being sent back to the client.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
10 years, 1 month