[jboss-jira] [JBoss JIRA] (WFLY-7483) Credential store has configuration in "uri" attribute.

Brian Stansberry (JIRA) issues at jboss.org
Fri Jan 20 09:52:00 EST 2017


    [ https://issues.jboss.org/browse/WFLY-7483?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13351746#comment-13351746 ] 

Brian Stansberry commented on WFLY-7483:
----------------------------------------

Is your cs-map a simple map or is it a complex attribute? That is are "store" and "create" fully defined fields of attribute cs-map, with fully defined child fields "password", "storage", "file"? Or are "store.password" etc arbitrary keys in a map?

Fully specified parameters have significant advantages over arbitrary ones and we should use those if at all possible. But if the map is just arbitrary key/value pairs, I don't have a strong preference for it over a string. If the uri is going to be useful in other contexts than WildFly management calls, so some users will learn the uri syntax, then using a different arbitrary format in WildFly management will be confusing.

> Credential store has configuration in "uri" attribute.
> ------------------------------------------------------
>
>                 Key: WFLY-7483
>                 URL: https://issues.jboss.org/browse/WFLY-7483
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Hynek Švábek
>            Assignee: Peter Skopek
>            Priority: Critical
>
> Credential store has configuration in "uri" attribute. All parameters are in one string. It can be confusing and there is risk of typo (e.g. delimiter typo)
> In my opinion the main intention for it is to have general solution for custom implementation.
> *Current state*
> {code}
> /subsystem=elytron/credential-store=cs001:add(uri="cr-store://test/cs/keystore.jceks?store.password=pass123;create.storage=true")
> {code}
> *Suggestion for improvement:*
> Better solution to achieve this could be use a map.
> e.g. some like that:
> {code}
> /subsystem=elytron/credential-store=credStore:add(cs-map={store.password=pass123, create.storage=true, store.file=path/to/cred/file})
> {code}
> Now credential store name is in URI too, it can be get from resource name.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)



More information about the jboss-jira mailing list