Re: [Patch] mod_auth_bearer / mod_autht_jwt: An alternative to AJP

On 19 Mar 2020, at 12:26, Graham Leggett wrote:On 19 Mar 2020, at 02:40, Eric Covener wrote:Neat, have you thought about mod_auth_form in relation to this?Something on my wishlist has been to not put the password in thesession / not continue to call the original auth

Re: [Patch] mod_auth_bearer / mod_autht_jwt: An alternative to AJP

On 19 Mar 2020, at 02:40, Eric Covener mailto:cove...@gmail.com>> wrote: > Neat, have you thought about mod_auth_form in relation to this? > Something on my wishlist has been to not put the password in the > session / not continue to call the original auth provider. Yes - the two modules that

Re: [Patch] mod_auth_bearer / mod_autht_jwt: An alternative to AJP

On Wed, Mar 18, 2020 at 8:00 PM Graham Leggett wrote: > > Hi all, > > With support for AJP becoming scarce, there has been a need to get > information from an Apache httpd to a backend server (Tomcat, etc) in a > secure way. > > The following patch introduces two new modules: > > -

[Patch] mod_auth_bearer / mod_autht_jwt: An alternative to AJP

Hi all, With support for AJP becoming scarce, there has been a need to get information from an Apache httpd to a backend server (Tomcat, etc) in a secure way. The following patch introduces two new modules: - mod_auth_bearer: This provides bearer authentication, as described in RFC6750. A