[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17281714#comment-17281714 ] Robert Munteanu commented on SLING-9397: The idea behind moving 'important' discu

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17281415#comment-17281415 ] Cris Rockwell commented on SLING-9397: -- Nope. Prefer to keep it on the ticket. Thank

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17281413#comment-17281413 ] Robert Munteanu commented on SLING-9397: Can we please keep the conversation at

Re: [jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

Have you looked into Sling Commons Crypto? https://sling.apache.org/documentation/bundles/commons-crypto.html It would not be complete prevention, but at least that way the secrets aren't stored plain-text. Of course even with that a malicious bundle could retrieve the private configuration from

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17281261#comment-17281261 ] Cris Rockwell commented on SLING-9397: -- {quote}Who are you trying to protect the sen

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17279811#comment-17279811 ] Robert Munteanu commented on SLING-9397: [~cris] - maybe ask on the dev list? >

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17279771#comment-17279771 ] Cris Rockwell commented on SLING-9397: -- One of the open items identified in the tick

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17140558#comment-17140558 ] Cris Rockwell commented on SLING-9397: -- [~rombert] I've started some updates on this

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17119625#comment-17119625 ] Robert Munteanu commented on SLING-9397: [~cris_rockwell] - looking at the instru

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17118977#comment-17118977 ] Cris Rockwell commented on SLING-9397: -- Question about local testing using "docker o

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17116944#comment-17116944 ] Robert Munteanu commented on SLING-9397: [~cris_rockwell] - I'd like to create a

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17116098#comment-17116098 ] Robert Munteanu commented on SLING-9397: [~cris_rockwell] - I plan to make a revi

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17107330#comment-17107330 ] Cris Rockwell commented on SLING-9397: -- Looks good. I've pulled the latest, built an

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17107007#comment-17107007 ] Robert Munteanu commented on SLING-9397: Now that the parent pom 39 is out, I've

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17104475#comment-17104475 ] Cris Rockwell commented on SLING-9397: -- Sounds great. Thanks [~rombert]! > SAML2 Au

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17104161#comment-17104161 ] Robert Munteanu commented on SLING-9397: I've started the release vote for the pa

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17102350#comment-17102350 ] Robert Munteanu commented on SLING-9397: Thanks for the jar-resource-bundle PR [~

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17101911#comment-17101911 ] Cris Rockwell commented on SLING-9397: -- Regarding NOTICE, it's building from the Vel

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17101571#comment-17101571 ] Robert Munteanu commented on SLING-9397: [~cris_rockwell] - I've whitelisted your

[jira] [Commented] (SLING-9397) SAML2 Authentication Handler [initial submission]

[ https://issues.apache.org/jira/browse/SLING-9397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17101051#comment-17101051 ] Cris Rockwell commented on SLING-9397: -- WRT the Web Profile SSO Profile specificatio