Interesting blog about a way to use a form for requesting creds (because it
looks nicer) but still using HTTP Basic auth for the actual authn.
http://www.peej.co.uk/articles/http-auth-with-html-forms.html

Sanjiva.

On Sat, Sep 5, 2009 at 8:43 AM, Sanjiva Weerawarana <[email protected]>wrote:

> Ah yes understood.
> Ref the discussion we were having about allowing any webapp to use IS for
> authentication and authorization, wouldn't a generic servlet filter (which
> had minimal dependencies so that only a bit of stuff has to be thrown into
> the webapp classpath) that any webapp can use to get basic auth support be
> quite useful?
>
> What are the implications of using that for Carbon itself - that is, stop
> the form based authentication and use basic auth.
>
> Sanjiva.
>
> On Fri, Sep 4, 2009 at 7:17 PM, Afkham Azeez <[email protected]> wrote:
>
>> We can declare servlet filters in the web.xml file. However, the code in
>> these filters will not see the classes within our bundles, since those
>> filters are loaded by the webapp classloader.
>> Azeez
>>
>>
>> On Fri, Sep 4, 2009 at 1:05 PM, Sanjiva Weerawarana<[email protected]>
>> wrote:
>> > Azeez, is there an option to do this at a webapp level? Before the
>> Carbon
>> > servlet basically .. or maybe map different paths to other servlets and
>> then
>> > use filters there?
>> >
>> > Sanjiva.
>> >
>> > On Fri, Sep 4, 2009 at 5:56 PM, Afkham Azeez <[email protected]> wrote:
>> >>
>> >> Srinath,
>> >> The OSGi specs are not going to support the newer Servlet API concepts
>> >> for the foreseeable future. This is not an Equinox limitation
>> >>
>> >> Azeez
>> >>
>> >> On Fri, Sep 4, 2009 at 1:57 AM, Srinath Perera<[email protected]>
>> wrote:
>> >> > Hi All;
>> >> >
>> >> > I am having trouble integrating Solr because it depends on a
>> >> > ServeltFilter for functionality (for basic functionality, not for
>> >> > security). However, AFAIK, carbon servelt support (think culprit is
>> >> > equinox) does not support filters.
>> >> >
>> >> > Right now we support some level of filtering through hard coding
>> >> > filter logic in to "CarbonSecuredHttpContext" (Please have a look at
>> >> > the CarbonSecuredHttpContext.java, you will see what I mean). IMHO
>> >> > this is a very bad way to do it, and it negates the advantages of
>> >> > carbon by requiring us to go and change the
>> >> > CarbonSecuredHttpContext.java when we add a bundle that need
>> filtering
>> >> > (e.g. solr integration need a change).
>> >> >
>> >> > Is it possible to support servelt filters (or equivalent) in the near
>> >> > future?  Do anybody know a way to work around this?
>> >> >
>> >> > Thanks
>> >> > Srinath
>> >> >
>> >> >
>> >> > --
>> >> > ============================
>> >> > Srinath Perera, Ph.D.
>> >> >   WSO2 Inc. http://wso2.com
>> >> >   Blog: http://srinathsview.blogspot.com/
>> >> >
>> >> > _______________________________________________
>> >> > Carbon-dev mailing list
>> >> > [email protected]
>> >> > https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>> >> >
>> >>
>> >>
>> >>
>> >> --
>> >> --
>> >> Afkham Azeez
>> >> [email protected]
>> >> WSO2 Inc. http://wso2.com
>> >> Blog: http://afkham.org
>> >>
>> >> _______________________________________________
>> >> Carbon-dev mailing list
>> >> [email protected]
>> >> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>> >
>> >
>> >
>> > --
>> > Sanjiva Weerawarana, Ph.D.
>> > Founder, Chairman & CEO; WSO2, Inc.;  http://wso2.com/
>> > email: [email protected]; cell: +1 650 265 8311 | +94 77 787 6880
>> > blog: http://sanjiva.weerawarana.org/
>> >
>> > The Open Source SOA Company
>> >
>> > _______________________________________________
>> > Carbon-dev mailing list
>> > [email protected]
>> > https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>> >
>> >
>>
>>
>>
>> --
>> --
>> Afkham Azeez
>> [email protected]
>> WSO2 Inc. http://wso2.com
>> Blog: http://afkham.org
>>
>>
>> _______________________________________________
>> Carbon-dev mailing list
>> [email protected]
>> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>>
>>
>
>
> --
> Sanjiva Weerawarana, Ph.D.
> Founder, Chairman & CEO; WSO2, Inc.;  http://wso2.com/
> email: [email protected]; cell: +1 650 265 8311 | +94 77 787 6880
> blog: http://sanjiva.weerawarana.org/
>
> The Open Source SOA Company
>



-- 
Sanjiva Weerawarana, Ph.D.
Founder, Chairman & CEO; WSO2, Inc.;  http://wso2.com/
email: [email protected]; cell: +1 650 265 8311 | +94 77 787 6880
blog: http://sanjiva.weerawarana.org/

The Open Source SOA Company
_______________________________________________
Carbon-dev mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev

Reply via email to