Hello David,

The __passwd() was our initial approach, but making python program controlled 
is probably(?) not a good way to go, at least it is not delivered as being 
program controlled. I guess that makes sense for an interpreted language.
The returned token itself is a basically a JWT if I recall correctly, but I 
liked to have the 'authorization service' part of it to be natively running on 
z/os / talking to RACF.

Kind regards,
Erik.

On Mon, 21 Feb 2022 21:08:37 +0800, David Crayford <[email protected]> wrote:

>You can do all of that in C code using the __passwd() and
>__check_resource_auth_np library functions. You will need to be program
>controlled which means Python and it's runtime will also need to be
>platform controlled. Most modern services do this using an API like the
>Zowe authenication API. If you're writing a web application in Flask you
>should consider using JWTs. If it were me, I would prefer to use a
>Spring Boot Java application instead of Python. There is a much richer
>set of SAF APIs and the entire Java JRE is program controlled.
>
]

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to