Ok so the ServletExtension covers cases where a more advanced
initialisation is possibly required.
How about cases where a mechanism could be instantiated using a default
constructor, should we simplify Stuart's example to just cover that?
Regarding your keycloak mechanism, could you see any cases where a user
would want to be enabling this without the ServletExtension?
Regards,
Darran Lofthouse.
On 25/11/13 14:50, Bill Burke wrote:
IMO, you don't really need to add another SPI. For Keycloak
(oauth)
stuff I'm doing, I just wrote a ServletExtension. It looks for
"keycloak" in web.xml's auth-method, then applies the appropriate
handlers and looks for the appropriate keycloak config file.
On 11/25/2013 9:45 AM, Darran Lofthouse wrote:
> Hopefully now is going to be the time to once and for all get the
> authentication mechanism configuration completed for the Undertow /
> WildFly integration.
>
> I have an old discussion I am going through again that covers
> configuring the mechanisms from the subsystem level i.e. a war can have
> it's security settings defined / overridden without the contents of the
> war being affected.
>
> But there is also the second group of users that prefers to have
> complete control within the deployment.
>
> I see you have already suggested the following Stuart: -
>
> > I was thinking we introduce:
> >
> > interface AuthenticationMechanismFactory {
> > AuthenticationMechanism create(final Map<String, String>
properties);
> > }
> >
> > And then allow a syntax like so:
> >
> >
>
<auth-method>com.acme.MyAuthMechanismFactory?prop1=val1,prop2=val2</auth-method>
>
> In previous releases the equivalent would have been achieved by defining
> a valve in the web app.
>
> Is this the kind of approach we want for web apps that are defining
> their own mechanisms? Is there any additional configuration required?
>
> Regards,
> Darran Lofthouse.
>
> _______________________________________________
> undertow-dev mailing list
> undertow-dev(a)lists.jboss.org
>
https://lists.jboss.org/mailman/listinfo/undertow-dev
>