[jboss-jira] [JBoss JIRA] Resolved: (AS7-664) Allow for state to be maintained aganst the connection within the Management HTTP Server

Tue May 10 08:44:18 EDT 2011

     [ https://issues.jboss.org/browse/AS7-664?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse resolved AS7-664.
----------------------------------

    Resolution: Done


JBoss AS Commits

https://github.com/jbossas/jboss-as/commit/f9d8f77e1bc2999504e04f18eb70c5eadd3164ef
https://github.com/jbossas/jboss-as/commit/8ba6b1a7217c36c212deb02e7422263178234b11

HTTP Server Commits

https://github.com/jbossas/httpserver/commit/deb8fd66047388eb04b18590a3e9f32c97f44ed2
https://github.com/jbossas/httpserver/commit/f03b20a449bdd3f67a614d55e000f7ffd1109866
https://github.com/jbossas/httpserver/commit/e1e85fd356b507340ecd4e49b29113e253485dea

> Allow for state to be maintained aganst the connection within the Management HTTP Server
> ----------------------------------------------------------------------------------------
>
>                 Key: AS7-664
>                 URL: https://issues.jboss.org/browse/AS7-664
>             Project: Application Server 7
>          Issue Type: Task
>          Components: Domain Management
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>             Fix For: 7.0.0.CR1
>
>
> There is a need for state between client and server to be maintained, this task is to allow it to be maintained against the connection.
>  Uses for this could be authenticate on connection and cache the authentication against the connection.
>  Track generated nonces against the connection so a nonce can only be used on that connection.
>  Cache GSSContext used for negotiation against the connection.
> Notes: -
> An alternative could be session cookies, however this would require all clients to support cookies or some form of URL re-writing to embed the session ID, HTTP keep-alive is standard for HTTP 1.1
> Another alternative could be to identify the address of the client, however this would just be the IP address / host name and port - there are no guarantees that a new connection would not re-use the same port especially if more than one administrator was running on that host.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira