[security-dev] Undertow IDM

[Anil Saldhana]

I am not questioning anything.  All I am trying to see how do we get 
PicketLink
being able to run on Undertow because when we release PL3 in June, it should
be Undertow ready. :)

On 04/25/2013 03:01 AM, Darran Lofthouse wrote:
> Guys if you know I am working on a task can we please try and not start
> a discussion during my down time - you have managed to go off on a
> thread without even finding out the intention of the class in the first
> place.
>
>    * Firstly, why does Undertow have it's own IDM interface?
>
> It is undesirable for the Undertow project to be bringing in
> dependencies on many different projects, an IDM provider being one of
> them.
>
> For this reason Undertow has defined an interface for it's IDM
> requirements, this effectively needs flagging as an spi but we have not
> been through the exercise of separating out api from spi.
>
>    * Secondly, how can we use PicketLink IDM in Undertow.
>
> PicketLink IDM is the whole reason for providing this interface, in the
> AS integration a wrapper should be provided to supply an implementation
> of this interface that delegates to PicketLink IDM.
>
> Do not get caught up on the Digest side as that is not quite complete,
> although having said that I am not convinced the PicketLink
> representation is complete either to fully support all aspects of Digest
> plus stronger hashes but that is going to be a separate discussion.
>
> This interface still needs to evolve further with the following
> priorities: -
>    - Provide the data / verification required by authentication
> mechanisms within Undertow.
>    - Make it easy to wrap PicketLink IDM.
>
> For the latter point I don't believe we need a 1:1 mapping between the
> two but we do need to aim to be close.
>
> Regards,
> Darran Lofthouse.
>
>
> On 24/04/13 19:54, Anil Saldhana wrote:
>> Hi all,
>> https://github.com/undertow-io/undertow/tree/master/core/src/main/java/io/undertow/security/idm
>>
>> I am wondering how we can use PicketLink IDM in Undertow.
>>
>> Regards,
>> Anil