Re: [wildfly-dev] WildFly Elytron - Credential Store - Next Stages

Hi Darran, looking at "Automation of Updates to the Store" in which CLI could be involved, I am listing potential issues if the CLI handles it: - it seems that the clear=>store+alias could be on a per operation basis. User could still want to not rely on credential store. So enabling globally the transformation would not work. - Having an interactive workflow would not work well for scripts. - Introducing new headers dedicated to automatic conversion could work (they would have to be recognized and support implemented on server), although with multiple credential-references located in the same command, the syntax could become complex. After having played a bit with CLI+credential-references, I am thinking that defining a new attribute in the credential-reference (existing clear-text and store are alternatives, can't use both) to express that the user wants automatic storage would seem quite natural from CLI. Furthermore, it would work with CLI existing support for operations. Something like {clear-text=mypassword, update-store=mystore, alias=ALIAS} I would enforce that the update-store already exists. If that is possible in elytron subsystem, that would make for a simple CLI workflow. JF On 26/09/2018 15:15, Darran Lofthouse wrote: