]
Kabir Khan updated WFCORE-2245:
-------------------------------
Fix Version/s: 3.0.0.Beta7
(was: 3.0.0.Beta6)
credential-reference capability-reference constraint
----------------------------------------------------
Key: WFCORE-2245
URL:
https://issues.jboss.org/browse/WFCORE-2245
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Claudio Miranda
Assignee: Darran Lofthouse
Fix For: 3.0.0.Beta7
There attribute credential-reference is defined in many subsystems as below. Looks like
the capability-reference constraint should be set in the "store" field of the
value-type, therefore I request a review on this capability-constraint placement.
{code}
"credential-reference" => {
"type" => OBJECT,
"description" => "Credential (from Credential Store) to
authenticate on data source",
"expressions-allowed" => false,
"required" => false,
"nillable" => true,
"capability-reference" =>
"org.wildfly.security.credential-store",
"access-constraints" => {"sensitive" => {
"credential" => {"type" => "core"},
"data-source-security" => {"type" =>
"datasources"}
}},
"value-type" => {
"store" => {
"type" => STRING,
"description" => "The name of the credential store holding
the alias to credential",
"expressions-allowed" => false,
"required" => false,
"nillable" => true,
"min-length" => 1L,
"max-length" => 2147483647L
},
"alias" => {
"type" => STRING,
"description" => "The alias which denotes stored secret or
credential in the store",
"expressions-allowed" => false,
"required" => false,
"nillable" => true,
"min-length" => 1L,
"max-length" => 2147483647L
},
"type" => {
"type" => STRING,
"description" => "The type of credential this reference is
denoting",
"expressions-allowed" => false,
"required" => false,
"nillable" => true,
"min-length" => 1L,
"max-length" => 2147483647L
},
"clear-text" => {
"type" => STRING,
"description" => "Secret specified using clear text (check
credential store way of supplying credential/secrets to services)",
"expressions-allowed" => false,
"required" => false,
"nillable" => true,
"min-length" => 1L,
"max-length" => 2147483647L
}
},
"access-type" => "read-write",
"storage" => "configuration",
"restart-required" => "all-services"
},
{code}