[aerogear-dev] Simplify Security of AeroDoc

Matthias Wessendorf matzew at apache.org
Tue Jul 22 07:15:14 EDT 2014


I think moving to Keycloak would be nice once we have the 1.0.0 mobile push
release, as this has impact on login of all the different AeroDoc client
apps (Android, iOS, FirefoxOS and JavaScript).

-Matthias




On Tue, Jul 22, 2014 at 1:10 PM, Bruno Oliveira <bruno at abstractj.org> wrote:

> +1 What about make use of KC instead?
>
> On 2014-07-22, Daniel Bevenius wrote:
> > +1 Less maintenance sounds good to me.
> >
> >
> > On 22 July 2014 11:00, Matthias Wessendorf <matzew at apache.org> wrote:
> >
> > >
> > >
> > >
> > > On Tue, Jul 22, 2014 at 10:58 AM, Sebastien Blanc <scm.blanc at gmail.com
> >
> > > wrote:
> > >
> > >> Hi All !
> > >>
> > >> I'm currently working on APGUSH-810[1] which consist in removing  the
> > >> dependency we still had on the deprecated aerogear-security project
> (RIP my
> > >> friend).
> > >>
> > >> But now, if I want to keep AeroDoc, feature equal as before, I have to
> > >> add a LOT of code around security (to handle role, annotations etc
> ...).
> > >> AeroDoc is already quite complex and time consuming to maintain and
> the
> > >> core scope is not security but advanced Push.
> > >>
> > >> So ... What I would like to propose is to keep only the
> authentification
> > >> (log in) and remove all the role handling part to simplify it.
> > >>
> > >> The only effect that this will introduce, is that a logged in user can
> > >> also access the admin to create leads.
> > >>
> > >
> > > that is fine w/ me
> > >
> > >>
> > >>
> > >> Wdyt ?
> > >>
> > >> Sebi
> > >>
> > >>
> > >> [1] https://issues.jboss.org/browse/AGPUSH-810
> > >>
> > >> _______________________________________________
> > >> aerogear-dev mailing list
> > >> aerogear-dev at lists.jboss.org
> > >> https://lists.jboss.org/mailman/listinfo/aerogear-dev
> > >>
> > >
> > >
> > >
> > > --
> > > Matthias Wessendorf
> > >
> > > blog: http://matthiaswessendorf.wordpress.com/
> > > sessions: http://www.slideshare.net/mwessendorf
> > > twitter: http://twitter.com/mwessendorf
> > >
> > > _______________________________________________
> > > aerogear-dev mailing list
> > > aerogear-dev at lists.jboss.org
> > > https://lists.jboss.org/mailman/listinfo/aerogear-dev
> > >
>
> > _______________________________________________
> > aerogear-dev mailing list
> > aerogear-dev at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
>
> --
>
> abstractj
> PGP: 0x84DC9914
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>



-- 
Matthias Wessendorf

blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/aerogear-dev/attachments/20140722/e63f36bf/attachment-0001.html 


More information about the aerogear-dev mailing list