enapps-enorman opened a new pull request #71:
URL: https://github.com/apache/felix-dev/pull/71


   For [FELIX-6390](https://issues.apache.org/jira/browse/FELIX-6390)
   
   The use case is that a webconsole plugin needs to make http requests outside 
of the OsgiManager servlet to retrieve some information to display in the 
plugin UI.   The goal is that the security checking of that other endpoint 
would perform the same security checks that would be needed to access the 
webconsole itself.  Reusing the WebConsoleSecurityProvider service in both 
places would be ideal.
   
   To make that the case, the proposal is to refactor the default "basic" 
authentication mechanism of the webconsole into a WebConsoleSecurityProvider 
class and expose it as a service.  A very low service.ranking of this last 
resort security provider should ensure that any other 
WebConsoleSecurityProvider component that exists would be used instead. 
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to