June 2020 - jboss-jira - Jboss List Archives

[JBoss JIRA] (ELY-1539) Remove deprecated AuthConf setHost, setProtocol, setPort properties

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1539?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1539: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Remove deprecated AuthConf setHost, setProtocol, setPort properties > ------------------------------------------------------------------- > > Key: ELY-1539 > URL: https://issues.redhat.com/browse/ELY-1539 > Project: WildFly Elytron > Issue Type: Enhancement > Components: Authentication Client > Reporter: David Lloyd > Priority: Critical > Fix For: 2.0.0.Alpha8 > > > We should deprecate (with a view towards removal) the setHost, setPort, and setProtocol properties of AuthenticationConfiguration. These properties are only sporadically utilized by backing systems, and often cause complex problems when they are used. -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-1735) Clean up the 'wildfly-elytron-auth-server' module as it currently contains both public and private API

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1735?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1735: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Clean up the 'wildfly-elytron-auth-server' module as it currently contains both public and private API > ------------------------------------------------------------------------------------------------------ > > Key: ELY-1735 > URL: https://issues.redhat.com/browse/ELY-1735 > Project: WildFly Elytron > Issue Type: Task > Reporter: Farah Juma > Priority: Major > Fix For: 1.13.0.CR1, 2.0.0.Alpha8 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-1737) Clean up the 'wildfly-elytron-credential-store' module as it currently contains both public and private API

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1737?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1737: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Clean up the 'wildfly-elytron-credential-store' module as it currently contains both public and private API > ----------------------------------------------------------------------------------------------------------- > > Key: ELY-1737 > URL: https://issues.redhat.com/browse/ELY-1737 > Project: WildFly Elytron > Issue Type: Task > Reporter: Farah Juma > Priority: Major > Fix For: 1.13.0.CR1, 2.0.0.Alpha8 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-1739) Clean up the 'wildfly-elytron-jaspi' module as it currently contains both public and private API

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1739?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1739: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Clean up the 'wildfly-elytron-jaspi' module as it currently contains both public and private API > ------------------------------------------------------------------------------------------------ > > Key: ELY-1739 > URL: https://issues.redhat.com/browse/ELY-1739 > Project: WildFly Elytron > Issue Type: Task > Reporter: Farah Juma > Priority: Major > Fix For: 1.13.0.CR1, 2.0.0.Alpha8 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-1740) Clean up the 'wildfly-elytron-sasl' module as it currently contains both public and private API

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1740?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1740: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Clean up the 'wildfly-elytron-sasl' module as it currently contains both public and private API > ----------------------------------------------------------------------------------------------- > > Key: ELY-1740 > URL: https://issues.redhat.com/browse/ELY-1740 > Project: WildFly Elytron > Issue Type: Task > Reporter: Farah Juma > Priority: Major > Fix For: 1.13.0.CR1, 2.0.0.Alpha8 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-1741) Clean up the 'wildfly-elytron-x500' module as it currently contains both public and private API

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1741?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1741: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Clean up the 'wildfly-elytron-x500' module as it currently contains both public and private API > ----------------------------------------------------------------------------------------------- > > Key: ELY-1741 > URL: https://issues.redhat.com/browse/ELY-1741 > Project: WildFly Elytron > Issue Type: Task > Reporter: Farah Juma > Priority: Major > Fix For: 1.13.0.CR1, 2.0.0.Alpha8 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-1858) Create Three new shaded jars elytron-common, elytron-acme, and elytron-password

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1858?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1858: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Create Three new shaded jars elytron-common, elytron-acme, and elytron-password > ------------------------------------------------------------------------------- > > Key: ELY-1858 > URL: https://issues.redhat.com/browse/ELY-1858 > Project: WildFly Elytron > Issue Type: Task > Components: Build > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Priority: Major > Fix For: 2.0.0.Alpha8 > > > These are for use by Quarkus bundling together some of the common dependencies. -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-1742) Clean up the 'wildfly-elytron-x500-cert' module as it currently contains both public and private API

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1742?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1742: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Clean up the 'wildfly-elytron-x500-cert' module as it currently contains both public and private API > ---------------------------------------------------------------------------------------------------- > > Key: ELY-1742 > URL: https://issues.redhat.com/browse/ELY-1742 > Project: WildFly Elytron > Issue Type: Task > Reporter: Farah Juma > Priority: Major > Fix For: 1.13.0.CR1, 2.0.0.Alpha8 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-1888) Review Context Association

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1888?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1888: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Review Context Association > -------------------------- > > Key: ELY-1888 > URL: https://issues.redhat.com/browse/ELY-1888 > Project: WildFly Elytron > Issue Type: Task > Components: API / SPI, MicroProfile > Reporter: Darran Lofthouse > Priority: Critical > Fix For: 2.0.0.Alpha8 > > > Our APIs are very much written for objects to be associated with the current Thread and to remain associated either until they are replaced or the call stack returns to the point where association occurs and the association is automatically removed. > Concurrent APIs are always a problem in this area as a "request" can now traverse multiple Threads, issues arise in relation to propagation to worker threads but also potentially in the association for any resulting callbacks / resumption of work across different threads. > We should double check our relationship with Jakarta Concurrency: - > https://projects.eclipse.org/projects/ee4j.cu > The following specification within MicroProfile is looking into some mechanisms for this association: - > https://github.com/eclipse/microprofile-context-propagation > It may be preferable for our APIs to remain unchanged but instead we provide sufficient integration to capture our current context specific instances and propagate them. > As we have more than one item that can be associated we may want to review if we want to use a single context internally that associates multiple items so we only have one item to propagate. > Generally the items we associate are immutable so cross Thread modifications are not likely to be an issue. > Alternatively we may choose to revisit our association APIs. > Overall creating this issue for now as it is an area we will need to investigate further and plan for - tentatively scheduled against 2.0 although I suspect we will need to handle this within a 1.x release. -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-1910) Develop JWT Token Issuer

by Darran Lofthouse (Jira)

[ https://issues.redhat.com/browse/ELY-1910?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated ELY-1910: ---------------------------------- Fix Version/s: 2.0.0.Alpha8 (was: 2.0.0.Alpha7) > Develop JWT Token Issuer > ------------------------ > > Key: ELY-1910 > URL: https://issues.redhat.com/browse/ELY-1910 > Project: WildFly Elytron > Issue Type: Feature Request > Components: API / SPI > Reporter: Darran Lofthouse > Priority: Major > Fix For: 2.0.0.Alpha8 > > > Assigning to API / SPI for now but we may want to create a new component to track token based authentication, especially JWT. > It may be desirable for us to be able to issue JWT tokens that can be used elsewhere. > At the moment our identity propagation makes use of credentials delegated to us during authentication but we have some more opportunities if we can obtain new credentials dynamically for this propagation. > An ideal use case for this could be a traditional web application already secured using traditional authentication such as username / password via a form, in that case the application will have a resulting SecurityIdentity with attributes, roles, and permissions assigned. > This feature request is to consider a component internal to the process to convert the SecurityIdentity to a JWT token that can now be used for any outbound calls as the identity to propagate the identity. > One possibility is some kind of transformation that can be applied on the SecurityDomain so the resulting SecurityIdentity has an associated JWT token credential as soon as it is created. > Another alternative is more integration within authentication client, the destination could be taken into account so different tokens / mappings are applied for different destinations. > I wont create the separate Jira issue yet but this could also open an option to dynamically obtain a token from a remote issuer - we may have been delegated a credential we can use to authentication against a remote identity provider and request a token that way. -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 7 months

1
0
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira June 2020