On Mon, Sep 26, 2011 at 9:46 AM, Nuwan Bandara <[email protected]> wrote:

> Hi
>
> On Sat, Sep 24, 2011 at 8:07 PM, Afkham Azeez <[email protected]> wrote:
>
>>
>>
>> On Sat, Sep 24, 2011 at 1:08 PM, Sanjiva Weerawarana <[email protected]>wrote:
>>
>>> +1. What is the challenge in achieving this? Basically I don't understand
>>> the problem!
>>
>>
> +1, the issue is currently some of the carbon-ui code is written assuming
> the UI will work only in HTTPS, there are some hard coded places to redirect
> HTTP traffic to HTTPS.
>
>
>>
>>
>> I think the issue is request on the HTTP port to the /carbon sub-context
>> blindly being redirected to HTTPS.
>>
>
> Yes, thats exactly the case, and we mite be able to add a parameter to a
> config file to enable/disable HTTP access.
>
>>
>>
>>>
>>> Also, I remember a discussion a long time ago about how products like GS
>>> and BAM were different because they have a "user" view that must be exposed
>>> all the time. The product console is only of interest for admins.
>>>
>> +1
>
>>
>>> Its fine for the admin console to require HTTPS access but totally not
>>> fine for the user view to require HTTPS. We used to have an anonymous mode
>>> for the user view too IIRC - does does that work??
>>>
>>
> We still do have the anonymous mode, however the implementation is done via
> few hacks to the UI, we would like to implement this properly and make it
> available as a feature in carbon, so products like GS/BAM can benefit from
> it.
>

+1. Redesigning the UI framework is part of our Roadmap. Lets have a meeting
on this and discuss this matter.

Thanks,
Sameera.

>
> Regards,
> /Nuwan
>
>
>>
>>> Sanjiva.
>>>
>>> On Fri, Sep 23, 2011 at 11:25 AM, Nuwan Bandara <[email protected]> wrote:
>>>
>>>> Hi All,
>>>>
>>>> $Subject is a critical requirement for the Gadget Server. Still we don't
>>>> have a proper mechanism of providing the UI in HTTP mode. For any other
>>>> server product this feature might not be a high priority requirement, but
>>>> for a presentation product like GS, users are willing to have an HTTP mode
>>>> as well (option to switch between HTTP and HTTPS). However IMO we should
>>>> keep our BE to FE communication in HTTPS and like to come up with a
>>>> mechanisms to provide Client to FE communication via HTTP.
>>>>
>>>> GS team would like to work on this feature, with the help of
>>>> security/carbon-core team, and would like to make this available in our 
>>>> next
>>>> major relase.
>>>>
>>>> Suggestion and comments welcome.
>>>>
>>>> --
>>>> *Thanks & Regards,
>>>>
>>>> Nuwan Bandara
>>>> Senior Software Engineer
>>>> WSO2 Inc. | http://wso2.com
>>>> lean . enterprise . middleware
>>>>
>>>> http://nuwan.bandara.co
>>>> *
>>>> <http://www.nuwanbando.com/>
>>>>
>>>> _______________________________________________
>>>> Architecture mailing list
>>>> [email protected]
>>>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>>>>
>>>>
>>>
>>>
>>> --
>>> Sanjiva Weerawarana, Ph.D.
>>> Founder, Chairman & CEO; WSO2, Inc.;  http://wso2.com/
>>> email: [email protected]; phone: +94 11 763 9614; cell: +94 77 787 6880 |
>>> +1 650 265 8311
>>> blog: http://sanjiva.weerawarana.org/
>>>
>>> Lean . Enterprise . Middleware
>>>
>>> _______________________________________________
>>> Architecture mailing list
>>> [email protected]
>>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>>>
>>>
>>
>>
>> --
>> *Afkham Azeez*
>> Director of Architecture; WSO2, Inc.; http://wso2.com
>> Member; Apache Software Foundation; http://www.apache.org/
>> * <http://www.apache.org/>**
>> email: **[email protected]* <[email protected]>* cell: +94 77 3320919
>> blog: **http://blog.afkham.org* <http://blog.afkham.org>*
>> twitter: **http://twitter.com/afkham_azeez*<http://twitter.com/afkham_azeez>
>> *
>> linked-in: **http://lk.linkedin.com/in/afkhamazeez*
>> *
>> *
>> *Lean . Enterprise . Middleware*
>>
>>
>> _______________________________________________
>> Carbon-dev mailing list
>> [email protected]
>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>>
>>
>
>
> --
> *Thanks & Regards,
>
> Nuwan Bandara
> Senior Software Engineer
> WSO2 Inc. | http://wso2.com
> lean . enterprise . middleware
>
> http://nuwan.bandara.co
> *
> <http://www.nuwanbando.com/>
>
> _______________________________________________
> Architecture mailing list
> [email protected]
> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>
>


-- 
Sameera Jayasoma
Technical Lead and Product Manager, WSO2 Carbon

WSO2, Inc. (http://wso2.com)
email: [email protected]
blog: http://tech.jayasoma.org

Lean . Enterprise . Middleware
_______________________________________________
Carbon-dev mailing list
[email protected]
http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev

Reply via email to