On Mon, Jul 9, 2018 at 3:08 PM Oleg Kalnichevski <[email protected]> wrote:
> On Mon, 2018-07-09 at 14:41 -0600, Gary Gregory wrote: > > Hi All: > > > > I need to implement server-side HTTP basic and digest auth using > > HttpCore > > on top of the reverse proxy I've already built. > > > > Are there any FOSS examples out there that you know of? > > > > Any tips or gotchas? > > > > Gary > > Hi Gary > > Any chance you might be willing to upgrade to HttpCore 5 for that? > HttpCore 5.0 has proper support for server-side request interceptors > (similar to Servlet filters) [1] and comes with an abstract > authentication filter that makes implementation of BASIC, DIGEST and > other authentication schemes much easier [2] [3]. With HttpCore 4.4 all > this would need to be built in a much, much clumsier way. > Hi Oleg, Either way, I've got my work cut of me ;-p Implement something clumsy and therefore hard to maintain or update from 4 to 5. This might be the incentive I need to update to 5. The biggest issue I see is that this might mean shipping with a beta or snapshot version of HttpCore. How stable do you see the API for the whole of HttpCore? Do we have a migration guide? I do not see anything obvious on the site or wiki. Thank you, Gary > Oleg > > [1] > https://github.com/apache/httpcomponents-core/blob/master/httpcore5/src/examples/org/apache/hc/core5/http/examples/ClassicServerFilterExample.java > [2] > https://github.com/apache/httpcomponents-core/blob/master/httpcore5/src/main/java/org/apache/hc/core5/http/io/support/AbstractHttpServerAuthFilter.java > [3] > https://github.com/apache/httpcomponents-core/blob/master/httpcore5-testing/src/test/java/org/apache/hc/core5/testing/classic/ClassicAuthenticationTest.java > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
