Re: [GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-05-04 Thread Hasini Witharana
-+Provide+an+OpenID+Connect+Authentication+Handler> > Can you please check on this matter? > > Thank you. > > On Thu, May 3, 2018 at 1:55 PM, Robert Munteanu <romb...@apache.org> > wrote: > >> On Thu, 2018-05-03 at 13:34 +0530, Hasini Witharana wrote: >> > Hi

[Dev][GSoC2018][OpenIDConnect] Using Apache Oltu OpenID Connect as a maven dependency

2018-05-06 Thread Hasini Witharana
get an error with the version. Their mailing list is not responding because Oltu is a retired project now. Does anyone know how to achieve $subject? Thank you. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <ht

[Dev][GSoC] How to expose a HTML page using a URL

2018-05-23 Thread Hasini Witharana
Hi all, Currently I am working on the GSoC project: OpenID Connect Handler. I have created a dummy login page with a button in html format in the project. I need to expose this page from a URL(e.g: localhost:8080/oidc/login). What is the best way to do this? Thank You. -- *Hasini Witharana

[Dev] OSGI Bundle Error when using " Nimbus OAuth 2.0 SDK with OpenID Connect extensions" as a dependency

2018-05-31 Thread Hasini Witharana
ix.framework.FrameworkStartLevelImpl.run(FrameworkStartLevelImpl.java:308) > at java.lang.Thread.run(Thread.java:748) > [1] - https://mvnrepository.com/artifact/com.nimbusds/oauth2-oidc-sdk/5.62 [2] - https://github.com/apache/sling-whiteboard/pull/14/commits/7b61dcfa1301d08db3dd2504d45c

[Dev] Sling Bundle Installation

2018-05-29 Thread Hasini Witharana
er a Servlet using a path. Is this an error with the code or with the installation? Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/hasini-witharana-185785109/>

Re: [Dev] Sling Bundle Installation

2018-05-30 Thread Hasini Witharana
Hi Robert, Thank you for the help. I followed your steps and, now the endpoint is working. On Wed, May 30, 2018 at 4:32 PM, Robert Munteanu wrote: > Hi Hasini, > > On Wed, 2018-05-30 at 09:30 +0530, Hasini Witharana wrote: > > Hi all, > > > > I installed a n

Re: [Dev] OSGI Bundle Error when using " Nimbus OAuth 2.0 SDK with OpenID Connect extensions" as a dependency

2018-05-31 Thread Hasini Witharana
Thank You. On Thu, May 31, 2018 at 5:00 PM, Robert Munteanu wrote: > Hi Hasini, > > On Thu, 2018-05-31 at 16:39 +0530, Hasini Witharana wrote: > > > Unresolved requirements: [[org.apache.sling.auth.oidc.core [164](R > > 164.28)] > > > osgi.wiring.package; > >

[Dev][GSoC] How to expose a HTML page using a URL

2018-06-04 Thread Hasini Witharana
files#diff-51f39473acfbf62ec7200e7f9b0b4962), I am using the below plugin, biz.aQute.bnd bnd-maven-plugin What is the way to do this? Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/hasini-witharana-185785109/>

Re: [Dev] OSGI Bundle Error when using " Nimbus OAuth 2.0 SDK with OpenID Connect extensions" as a dependency

2018-06-02 Thread Hasini Witharana
Hi Robert, This helped a lot. I deployed the bundle (oauth2-oidc-sdk) successfully. Thank You. On Fri, Jun 1, 2018 at 2:49 AM, Robert Munteanu wrote: > On Fri, 2018-06-01 at 01:03 +0530, Hasini Witharana wrote: > > Unresolved requirements: [[oauth2-oidc-sdk [166

[Dev][GSoC] Using a cache to store a string value

2018-06-06 Thread Hasini Witharana
the state value is only needed to be stored for like 5 minutes. Therefore I thought to use a simple cache for this purpose. I would like to get your opinions for this. Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin

Re: [Dev] Requesting browser cookie from Sling Servlets.

2018-06-25 Thread Hasini Witharana
one? > We need to validate it against the authorization request sent from the user, that is why I need a cookie. Thank You. On Mon, Jun 25, 2018 at 3:16 PM, Robert Munteanu wrote: > On Sat, 2018-06-23 at 00:28 +0530, Hasini Witharana wrote: > > > > > > The fo

Re: [Dev] Requesting browser cookie from Sling Servlets.

2018-06-25 Thread Hasini Witharana
validation hence I think RP should set the cookie value. On Mon, Jun 25, 2018 at 3:34 PM, Robert Munteanu wrote: > On Mon, 2018-06-25 at 15:30 +0530, Hasini Witharana wrote: > > > > > > When the auth endpoint calls back to the relying party > > > (authorization >

Re: [Dev] Requesting browser cookie from Sling Servlets.

2018-06-25 Thread Hasini Witharana
ethod? On Mon, Jun 25, 2018 at 3:52 PM, Robert Munteanu wrote: > On Mon, 2018-06-25 at 15:50 +0530, Hasini Witharana wrote: > > > > > > 'Sent from the user' -> I assume that's sent from the user's > > browser, > > > but to whom? To the Authorizat

Re: [Dev] Requesting browser cookie from Sling Servlets.

2018-06-22 Thread Hasini Witharana
On Fri, Jun 22, 2018, 5:47 PM Robert Munteanu wrote: > On Fri, 2018-06-22 at 14:31 +0300, Robert Munteanu wrote: > > On Fri, 2018-06-22 at 15:38 +0530, Hasini Witharana wrote: > > > Hi Robert, > > > > > > 1. User access Apache Sling login page > > &g

Re: [Dev] Requesting browser cookie from Sling Servlets.

2018-06-22 Thread Hasini Witharana
at 14:31 +0300, Robert Munteanu wrote: > > On Fri, 2018-06-22 at 15:38 +0530, Hasini Witharana wrote: > > > Hi Robert, > > > > > > 1. User access Apache Sling login page > > > > > > > > - the login page contains a link to an external OAuth p

[Dev] Requesting browser cookie from Sling Servlets.

2018-06-20 Thread Hasini Witharana
cookie or what should I use instead of cookie? Thank You. [1] - https://openid.net/specs/openid-connect-basic-1_0.html -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/hasini-witharana-185785109/>

Re: [GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-05-03 Thread Hasini Witharana
On Sun, 2018-04-29 at 01:05 +0530, Hasini Witharana wrote: > > Hi Robert, > > > > I have done some changes to the estimated schedule and end > > deliverables > > sections, in the proposal[1]. Please review and give your comments. > > > > [1] - > > ht

Re: [GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-04-26 Thread Hasini Witharana
EADME etc in the modules themselves > > So for example we (at least I) much prefer having things at > cwiki.apache.org rather than Google Docs, as that belongs to the ASF > and especially is easier to discover. > > -Bertrand > -- *Hasini Witharana* Undergraduate

Re: [GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-04-28 Thread Hasini Witharana
PM, Robert Munteanu <romb...@apache.org> wrote: > Hi Hasini, > > On Fri, 2018-04-27 at 00:37 +0530, Hasini Witharana wrote: > > Hi all, > > > > In OpenID Connect flow there are three main parties. > > > >1. End-User - Resource owner > >

[Dev][GSoC] How to read configurations from a xml file

2018-07-03 Thread Hasini Witharana
data. Are there any examples I can refer for this particular task? Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/hasini-witharana-185785109/>

Re: [Dev] Requesting browser cookie from Sling Servlets.

2018-06-21 Thread Hasini Witharana
Below diagram contains the OIDC flow. ​ On Thu, Jun 21, 2018 at 7:19 AM, Hasini Witharana wrote: > Hi all, > > I am implementing an OpenID Connect(OIDC) handler for Apache Sling. In an > OIDC request there is a parameter called state. Below is the definition > given t

Re: [Dev] Requesting browser cookie from Sling Servlets.

2018-06-22 Thread Hasini Witharana
wiki link : https://cwiki.apache.org/confluence/display/SLING/OIDC+Flow On Fri, Jun 22, 2018 at 3:38 PM, Hasini Witharana wrote: > Hi Robert, > > 1. User access Apache Sling login page >> >> - the login page contains a link to an external OAuth provider (Google) >> &

Re: [Dev] Requesting browser cookie from Sling Servlets.

2018-06-22 Thread Hasini Witharana
to store this variable on a HashMap against the cookie value. I have attached the diagram below. Thank You. On Fri, Jun 22, 2018 at 2:26 PM, Robert Munteanu wrote: > On Thu, 2018-06-21 at 21:58 +0530, Hasini Witharana wrote: > > Below diagram contains the OIDC flow. > > (snip) &

[Dev][GSoC]Resource /favicon.ico not found

2018-07-30 Thread Hasini Witharana
y and I am trying to get logged into http://localhost:8080/starter/index.html automatically with the above credentials. When I send a request to http://localhost:8080/auth/oidc as shown in the code I am getting the below error in error logs. *Resource /favicon.ico not found* How to solve this? Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/hasini-witharana-185785109/>

[Dev] How to send a HTTP GET request using SlingHttpServletResponse

2018-08-01 Thread Hasini Witharana
- abc How to achieve this? Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/hasini-witharana-185785109/>

Re: [Dev] How to send a HTTP GET request using SlingHttpServletResponse

2018-08-01 Thread Hasini Witharana
Hi Robert, I am trying to send a request after finding the username and password to the custom authentication handler. Thank You. On Thu, Aug 2, 2018 at 1:22 AM, Robert Munteanu wrote: > Hi Hasini, > > On Thu, 2018-08-02 at 01:17 +0530, Hasini Witharana wrote: > > Hi all,

Re: [Dev][GSoc] How to create a user without password using Jackrabbit API

2018-07-16 Thread Hasini Witharana
> the configuration. > > On Thu, Jul 12, 2018 at 1:42 AM, Robert Munteanu > wrote: > > > On Thu, 2018-07-12 at 13:53 +0530, Hasini Witharana wrote: > > > Hi all, > > > > > > I tried the below curl command to create a user. > > > &g

Re: [Dev][GSoC]Redirecting to Apache Sling home page with logged user.

2018-07-24 Thread Hasini Witharana
lve this? Thank You. On Mon, Jul 23, 2018 at 6:42 PM, Robert Munteanu wrote: > Hi Hasini, > > On Sun, 2018-07-22 at 23:20 +0530, Hasini Witharana wrote: > > Hi all, > > > > I have implemented a login with Google for Apache Sling. After user > > is > > successful

[Dev][GSoC]Redirecting to Apache Sling home page with logged user.

2018-07-22 Thread Hasini Witharana
be logged in. Are there any documentations or examples for this implementation? Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/hasini-witharana-185785109/>

Error when accessing Browse Content form http://localhost:8080/starter/index.html

2018-07-18 Thread Hasini Witharana
-starter/tree/master [2] - http://localhost:8080/bin/browser.html Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/hasini-witharana-185785109/>

Re: [Dev][GSoc] How to create a user without password using Jackrabbit API

2018-07-17 Thread Hasini Witharana
Hi Robert, When I used the admin session I am getting an error like below. How to overcome this issue? "Bundle org.apache.sling.jcr.api is NOT whitelisted" Thank You. On Tue, Jul 17, 2018 at 1:19 AM, Robert Munteanu wrote: > On Tue, 2018-07-17 at 00:40 +0530, Hasini Witharana w

[Dev][GSoc] How to create a user without password using Jackrabbit API

2018-07-08 Thread Hasini Witharana
will not be provided. Now I need to store the successfully authenticated users using Jackrabbit API. To create a user using this API we need username and password. Is there any way to create a user without providing a password? Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science

Re: [Dev][GSoc] How to create a user without password using Jackrabbit API

2018-07-12 Thread Hasini Witharana
you to pass null as the > password and it doesn't attempt to store a password in that case. > > Your other option would be just to generate some random password value that > the user wouldn't be able to easily guess and use to login. > > > Regards, > Eric > > On Sun, Jul

[GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-04-23 Thread Hasini Witharana
this opportunity. [1] - https://docs.google.com/document/d/1ki_mv_ ngtMFsP2cqZkVfZfAYLAYle6M5Srs0WsgHXEs/edit?usp=sharing Thank You. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/has

Re: [GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-04-24 Thread Hasini Witharana
, 2018 at 2:36 PM, Robert Munteanu <romb...@apache.org> wrote: > Hi Hasini, > > On Tue, 2018-04-24 at 00:51 +0530, Hasini Witharana wrote: > > Hi Robert, > > > > I have been selected to the $subject GSoC project. I am really > > looking > > forward t

Re: [GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-04-24 Thread Hasini Witharana
rate. > > Good luck with you project. > > @Hasini: I can help with regard to the Oauth / Oidc protocols and > architecture so if you ever find yourself struggling, reach out and I'll > find some time. > > /Eugen > > > On 24.04.2018 12:06, Robert Munteanu wrote: >

Re: [Dev][GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-03-27 Thread Hasini Witharana
gt; wrote: > On Fri, 2018-03-23 at 22:38 +0530, Hasini Witharana wrote: > > > > Can you please direct me to Apache Sling Repository for OAuth2.0 > > implementation? > > We don't have one yet :-) There is an implementation in Apache Oltu > that we can definitely us

Re: [Dev][GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-03-28 Thread Hasini Witharana
:39 +0300, Robert Munteanu wrote: > > What do you mean by exporting? You can definitely use the jar files > > as > > dependencies, the are no problems from a licensing of technical point > > of view. > > I meant licensing *or* technical point of view. > > Rob

Re: [Dev][GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-03-25 Thread Hasini Witharana
8 at 10:38 PM, Hasini Witharana <hasinidila...@gmail.com> wrote: > Hi Robert, > > what would we lose in terms of functionality if we don't implement >> the Hybrid flow? > > > In the Hybrid flow, we will be able to issue tokens separately for front > channel and b

[Dev][GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-03-22 Thread Hasini Witharana
] - https://medium.com/@hasiniwitharana/openid-connect-532465308090 <http://openid.net/specs/openid-connect-registration-1_0.html> Thank you. -- *Hasini Witharana* Undergraduate | Department of Computer Science and Engineering University of Moratuwa Linkedin <https://www.linkedin.com/in/hasini-

Re: [Dev][GSOC2018] Project Idea : Provide an OpenID Connect Authentication Handler

2018-03-23 Thread Hasini Witharana
2018 at 4:03 PM, Robert Munteanu <romb...@apache.org> wrote: > Hi Hasini, > > Thank you for the idea submission and for the description. Some more > comments inline. > > On Thu, 2018-03-22 at 18:21 +0530, Hasini Witharana wrote: > > Hi all, > > > > I