[Hawkular-dev] securing download WAR

Thu Nov 19 17:06:44 EST 2015

Here's the PR I have right now - anyone have any ideas what's missing?

https://github.com/hawkular/hawkular/pull/676

I can download the agent distro fine, but I can't get the installer:

$ curl http://jdoe:password@localhost:8080/hawkular/wildfly-agent/installer
<html><head><title>Error</title></head><body>Forbidden</body></html>

I know the keycloak stuff is in here, because I can only get the downloads if I provide good credentials or no credentials at all - bad credentials gives me an error:

curl http://jdoe:BAD@localhost:8080/hawkular/wildfly-agent/download
<html><head><title>Error</title></head><body>Unauthorized</body></html>

curl http://jdoe:password@localhost:8080/hawkular/wildfly-agent/download
...this works - i get the content...