[jboss-jira] [JBoss JIRA] (WFCORE-1101) Enhance the security realm plug-in mechanism for client-cert / external verification.

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/WFCORE-1101?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse resolved WFCORE-1101.
--------------------------------------
    Fix Version/s: 3.0.0.Alpha2
         Assignee: Darran Lofthouse
       Resolution: Out of Date


Moving to WildFly Elytron which already contains a comprehensive security realm API/SPI and will also support custom implementations.

> Enhance the security realm plug-in mechanism for client-cert / external verification.
> -------------------------------------------------------------------------------------
>
>                 Key: WFCORE-1101
>                 URL: https://issues.jboss.org/browse/WFCORE-1101
>             Project: WildFly Core
>          Issue Type: Task
>          Components: Domain Management, Remoting, Security
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>              Labels: Realm_Management
>             Fix For: 3.0.0.Alpha2
>
>
> Currently verification is just based on the defined trust store - this is to take it one step further and allow an optional additional verification.
> As a first step will need to ensure we have a suitable Callback from the authenticator to the realm to verify the identity and then this can be passed on to the plug-in.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)