Re: [undertow-dev] How to do custom authentication?
Hi Marc,
I know this isn't a JBoss list but my post on the JBoss forums
isn't going anywhere so I thought I'd ask here. If someone could point me to an
example (I usually start with an example of authenticating based on a username in a
header) I'd really appreciate it.
If you're looking for custom authentication then there's a
standardized SPI/API for that: JASPIC. It's supported relatively well
by WildFly 8.x.
There's an example of building a simple module here:
http://www.trajano.net/2014/06/creating-a-simple-jaspic-auth-module
and somewhat more complex one by the same author here:
http://www.trajano.net/2014/07/oauth-2-0-jaspic-implementation
I've posted about the background of JASPIC here:
http://arjan-tijms.omnifaces.org/2012/11/implementing-container-authentic...
and created several tests that demonstrate a variety of behaviors
here: https://github.com/javaee-samples/javaee7-samples/tree/master/jaspic
(see also https://github.com/javaee-samples/javaee7-samples/issues/243)
Another example can be found here: https://github.com/arjantijms/two-factor-sam
This should hopefully be enough to start with an example where you
authenticate based on a header.
Kind regards,
Arjan
On Wed, Oct 15, 2014 at 8:00 PM, Marc Boorshtein
<marc.boorshtein(a)tremolosecurity.com> wrote:
Undertow team,
I'm trying to integrate our integration with JBoss into Wildfy 8.x. Its a
reverse proxy that generates a token in a header that is then decoded and
the context is set. It works in JBoss 7.x using a combination of a Valve
and a JAAS LoginModule but am struggling to figure out what the replacement
of the Valve would be.
Doing some googling I found
http://undertow.io/documentation/core/security.html but it doesn't point out
how to configure this without writing custom code to add mechanism to the
chain. I found a stacktrace article about setting up a servlet extension
that creates the mechanism, but I don't feel like thats the *best* solution.
When I did the JBoss 7 integration I used PicketLink's SAML integration as
an example but it looks like it isn't yet working for Wildfly 8.x and won't
work until 9?
I know this isn't a JBoss list but my post on the JBoss forums isn't going
anywhere so I thought I'd ask here. If someone could point me to an example
(I usually start with an example of authenticating based on a username in a
header) I'd really appreciate it.
Thanks
Marc Boorshtein
CTO Tremolo Security
marc.boorshtein(a)tremolosecurity.com
_______________________________________________
undertow-dev mailing list
undertow-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev