[security-dev] Undertow IDM

[Bill Burke]

On 4/25/2013 7:44 PM, Stuart Douglas wrote:
>
>
> Bill Burke wrote:
>> Does Undertow give you some API so that you can get at the guts of a
>> SecurityCOntext? Basically the principal and its role mappings?
>
> Not directly, the principle and roles are determined by the relevant
> methods on the Account interface. Basically your auth mechanism could
> potentially just skip the IdentityManager entirely, and simply return
> its own account with whatever principal and roles you want.
>

That works for my bearer token auth, but not the interface that actually 
builds the token.  Looks like the Account interface just has role 
checks, not the ability to know principal and roles.

>>
>> I really need to port my SSO/OAuth stuff to Undertow. I hope you're
>> still up for suggestions and API changes. But what I care most about is
>> that Undertow doesn't make it impossible to add these capabilities or
>> put undo configuration complexities that don't exist in the AS7 version
>> of this functionality.
>
> Darran started a thread about the configuration on undertow-dev a while
> back ("Web Application - Security Mechanism Selection"). The security
> API is not set in stone, if there are things that you need that we don't
> provide feel free to start a discussion on undertow-dev about it.
>

Ya, I'll get back to you guys.


-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com