Re: [akka-user] How to pass a Spring security context to all actors in a Akka system?

2016-03-20 Thread 'Ryan Tanner' via Akka User List
Don't pass auth info into the *system, *pass with with each message into the *actor*. When a request comes in and its identity is authenticated, pass that authentication along with your messages. Then, if needed, let your actors figure out authorization based on that authenticated identity

Re: [akka-user] How to pass a Spring security context to all actors in a Akka system?

2016-03-19 Thread Bernd Götz
Thanks, sounds interesting, I'll have a closer look at it. 2016-03-17 22:03 GMT+01:00 Carlos Dañel Ferreyra : > I believe the tracing module > of Kamon can help you here. > After authentication you should

Re: [akka-user] How to pass a Spring security context to all actors in a Akka system?

2016-03-19 Thread Bernd G.
Thanks, sounds interesting, I'll have a closer look at it. On Friday, 18 March 2016 00:13:51 UTC+1, Carlos Dañel Ferreyra wrote: > > I believe the tracing module > of Kamon can help you here. > After authentication you should

Re: [akka-user] How to pass a Spring security context to all actors in a Akka system?

2016-03-19 Thread Konrad Malawski
Having that said, we do have such mechanisms in place – that act "like a thread local, but across actors", metadata can be transferred along with messages transparently using our Lightbend Monitoring infrastructure: Here's an example which does so with MDC data, but it could do the same for

Re: [akka-user] How to pass a Spring security context to all actors in a Akka system?

2016-03-19 Thread Carlos Dañel Ferreyra
I believe the tracing module of Kamon can help you here. After authentication you should dispatch the first message within a new tracer context, Kamon will ensure that context is propagated to all actors involved. El jueves, 17

Re: [akka-user] How to pass a Spring security context to all actors in a Akka system?

2016-03-19 Thread Bernd G.
Hi Konrad, thanks for the heads up. Good point, I will also ask around in the Spring community. It can be looked at, however, as a general question of security in a Akka system - how can I pass user identity information into a Akka system so that it can be picked up by any Actor receiving

Re: [akka-user] How to pass a Spring security context to all actors in a Akka system?

2016-03-19 Thread Bernd Götz
Hi Ryan, many thanks, your proposal makes sense to me, and I think I will take that approach. On the other hand, I don't really like the idea to have the user id passed along as a member of my messages, like I don't think we should pass around the user id as method parameters in the non-Akka

Re: [akka-user] How to pass a Spring security context to all actors in a Akka system?

2016-03-18 Thread Konrad Malawski
Hi there Bernd, I think this is more of a Spring Security question... I don't really know if those strategies they provide work in such contexts. In general you could ask such question on a Spring group and explain that the context needs to survive being used from one thread at a time, but it

[akka-user] How to pass a Spring security context to all actors in a Akka system?

2016-03-14 Thread Bernd G.
Hello All, we have a small service that implements a REST API, and we use Akka to enable concurrency, for structure and readibility of our code. All works fine, except I'm struggling now with our security integration. We're using Spring as our 'container' framework and Spring Security to