Re: OFBIZ-10307: Navigate from a domain to another with automated signed in authentication

2018-08-15 Thread Jacques Le Roux
Hi Jinghai, The problem with the token master secret key is to guarantee its secrecy at max. We already discussed different solutions at https://s.apache.org/7yyR and https://s.apache.org/IBDM How is Redis more secure than Postgres for storing values? Thanks Jacques Le 15/08/2018 à 14:37,

Shipping data duplicated

2018-08-15 Thread Jacques Le Roux
Hi, Is there a reason why Shipping data are now duplicated in trunk at     applications/commonext/data/ShippingData.xml and     /applications/datamodel/data/demo/OrderDemoData.xml This is not the case with current stable Jacques

Re: OFBIZ-10307: Navigate from a domain to another with automated signed in authentication

2018-08-15 Thread Shi Jinghai
Dear Jacques, On how to store the Tokens, as a token is a key, value is the UserLogin entity and/or other info, a key-value db, Redis[1] is a good choice. Redis is no.7 in db ranking in Aug 2018[2], becomes more and more popular. Goldman Sachs invested Redis team in last year[3]. It's common

OFBIZ-10307: Navigate from a domain to another with automated signed in authentication

2018-08-15 Thread Jacques Le Roux
Hi, Some time ago I created https://issues.apache.org/jira/browse/OFBIZ-10307. I asked for reviews but only Taher answered and he asked to know the goal of this new feature. It was actually developed for a client who needed to get from one OFBiz instance on a server (on a domain) to another