[ 
https://issues.apache.org/jira/browse/JENA-436?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13633042#comment-13633042
 ] 

Stephen Allen commented on JENA-436:
------------------------------------

We may want to look at using Apache Shiro [1] for handling this.  I've used it 
in the past and been impressed.

[1] http://shiro.apache.org/


                
> Support preserving cookie state over a series of HTTP operations
> ----------------------------------------------------------------
>
>                 Key: JENA-436
>                 URL: https://issues.apache.org/jira/browse/JENA-436
>             Project: Apache Jena
>          Issue Type: Improvement
>          Components: ARQ, Jena
>    Affects Versions: Jena 2.10.1
>            Reporter: Rob Vesse
>            Assignee: Rob Vesse
>            Priority: Minor
>              Labels: cookies, http
>   Original Estimate: 336h
>  Remaining Estimate: 336h
>
> 2.10.1 makes several improvements to HTTP operation handling to support 
> authentication on updates.  However the support for both queries and updates 
> is still only for HTTP authentication which means it cannot be used with 
> systems that use forms based authentication e.g. Apache mod_auth_form 
> http://httpd.apache.org/docs/2.4/mod/mod_auth_form.html
> Supporting this will require some fairly substantial reworking of the HTTP 
> handling code for both queries and updates since it needs to support several 
> things:
> 1 - Being able to carry out a login operation to an arbitrary URL to perform 
> the authentication and initalize the necessary cookies
> 2 - Storing and presenting appropriate cookies over multiple requests
> If we are to carry out this work it may be good to standardize to using a 
> single HTTP library, currently queries use HttpQuery (a wrapper around the 
> JRE provided HttpURLConnection) while updates use HttpOp (a wrapper around 
> the Apache HttpClient library)
> In doing this standardization we should also standardize how parameters are 
> passed through these layers.  For queries the QueryEngineHTTP sets properties 
> on the HttpQuery object while for updates we pass them via a HttpContext 
> object.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to