Some thoughts on Sling Models and injectors

Our team has been working on adopting the sling model paradigm which has given me a chance to get involved with creating a number of injectors to meet our needs. I wanted to share some of my observations. To clarify the existing flow, when we are looking at performing an injection it is

RE: Some thoughts on Sling Models and injectors

, Jason Bailey jason.bai...@sas.com wrote: Our team has been working on adopting the sling model paradigm which has given me a chance to get involved with creating a number of injectors to meet our needs. I wanted to share some of my observations. To clarify the existing flow, when we

RE: Some thoughts on Sling Models and injectors

. And really all conversion should happen via adaptTo(). Justin On Thu, Aug 28, 2014 at 2:49 PM, Jason Bailey jason.bai...@sas.com wrote: Our team has been working on adopting the sling model paradigm which has given me a chance to get involved with creating a number of injectors to meet our needs

RE: Please review Sling 7 Javadocs

For what it's worth, I find the new styling far superior to the old layout and css, which imho is dreadful. However that pails to the fact that the API is actually released :) Thanks and great work. -Original Message- From: robert.munte...@gmail.com [mailto:robert.munte...@gmail.com] On

RE: SafeObjectInputStream prototype

We've been looking at a javaagent and/or a WeavingHook to do the same thing. Prefer the WeavingHook since we could configure it as a service, but half our environments are on an older platform that doesn't that ability yet. -Original Message- From: Bertrand Delacretaz

RE: [RT] Improve resource type handling

There is a third use case from a presentation perspective, which is the 'is a' use case. Is this resource a resource of resource type 'foo' -Original Message- From: Konrad Windszus [mailto:konra...@gmx.de] Sent: Friday, March 18, 2016 4:42 AM To: dev@sling.apache.org Subject: Re: [RT]

RE: Stuff to work on (Was: sling attic / cleanup)

, 2016-10-18 at 14:32 +, Jason Bailey wrote: > Is there a list or something of modules that the sling developers > would like to have someone work on? Well :-) What would you like to work on? Top of my head I can think of things that need work on - automated testing - performance

RE: sling attic / cleanup

Is there a list or something of modules that the sling developers would like to have someone work on? -Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Tuesday, October 18, 2016 10:04 AM To: dev Subject: Re: sling attic /

RE: value level encryption - Donating?

> Hi Jason, > > I'll take a closer look this week and move the process forward. > > Thanks, > > Robert > > On Tue, 2017-12-05 at 14:28 +, Jason Bailey wrote: > > Thanks Antonio, I appreciate the feedback and I empathize with the > > time constraints

RE: value level encryption - Donating?

:25 +, Jason Bailey wrote: > Robert - you mentioned " attach the bundle as a single archive > attached to SLING-7255" are you looking for the compiled bundle or a > repository archive? Sorry, that should be the source code :-) Robert

SlingPostProcessor and ModifiableValueMaps question

I'm working on a SlingPostProcessor. As part of this I need to remove a field value that was passed in as part of the POST. If I use a session object, I can remove the item and there isn't a problem. However, I wanted to abstract out the usage of the Session object so it's not tied to a JCR

RE: value level encryption

, but that's an implementation detail. Regards, Justin On Fri, Nov 3, 2017 at 2:48 PM Jason Bailey <jason.bai...@sas.com> wrote: > They only docs I can find on that, assuming we're talking AEM, > mentions it only works for posting things into /etc/cloudservices. So that's > o

Re: value level encryption

Ok, switching to CBC and then adding an additional property to store the IV for that resource. From: Antonio Sanso Sent: Monday, November 13, 2017 1:34 AM To: dev@sling.apache.org Subject: Re: value level encryption   EXTERNAL hi Jason, leaving aside the API

RE: value level encryption

you are defining as default. AES ECB is almost = to no encryption. Same as providing a fixed IV... just saying. regards antonio On Nov 10, 2017, at 9:53 PM, Jason Bailey <jason.bai...@sas.com> wrote: > Wanted to give a heads up in the direction I'm going with this. > > htt

RE: value level encryption

). > Am 10.11.2017 um 22:21 schrieb Konrad Windszus <konra...@gmx.de>: > > Hi Jason, in general this looks good. But please add nullability annotations > to CipherProvider. Also using @CheckForNull on methods returning void is > useless. > Konrad > >> Am 10.11.2

RE: value level encryption - Donating?

of the comment though On Nov 20, 2017, at 2:50 PM, Jason Bailey <jason.bai...@sas.com> wrote: > So I'm just about done implementing this. > > https://github.com/JEBailey/sling-encrypt > > Value level encryption. IV is stored inline so there's no repetition. > Acce

RE: value level encryption - Donating?

, 2017 3:07 PM To: dev@sling.apache.org Subject: Re: value level encryption - Donating? EXTERNAL hi Jason, I get your point On Nov 20, 2017, at 4:57 PM, Jason Bailey <jason.bai...@sas.com> wrote: > Thanks Antonio. I had considered doing GCM, but I hesitated since it's not > listed a

RE: value level encryption - Donating?

to all post requests. I think this would be a useful addition to Sling. We may want to have some kind of SPI to support different encryption schemes, but that's an implementation detail. Regards, Justin On Fri, Nov 3, 2017 at 2:48 PM Jason Bailey <jason.bai...@sas.com> wrote: > They

RE: value level encryption - Donating?

? Decrypt all the encrypted value and re-encrypt with the new key... ? - Encrypt-than-MAC I have also noted that the key is stored as OSGi configuration... This might also be part of a bigger discussion regards antonio On Nov 20, 2017, at 10:03 PM, Jason Bailey <jason.bai...@sas.com>

RE: value level encryption - Donating?

Will work on that today. -Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Tuesday, November 21, 2017 5:48 AM To: dev Subject: Re: value level encryption - Donating? EXTERNAL Hi, On Tue, Nov 21, 2017 at 11:37 AM, Antonio Sanso

RE: value level encryption - Donating?

ct: Re: value level encryption - Donating? EXTERNAL Hi, On Mon, Nov 20, 2017 at 2:50 PM, Jason Bailey <jason.bai...@sas.com> wrote: > https://github.com/JEBailey/sling-encrypt ... Just a naming nitpick, I think EncryptableValueMap would be a more accurate name than EncryptionValueMa

value level encryption

Here's the use case My organization has decided that to conform to the GDPR, any sensitive data should be encrypted while at rest. From a Sling perspective that is a challenge since we've empowered the authors to create forms the way they want. So to be on the safe side, we're looking at

RE: value level encryption

the idea of an EncryptionValueMap seems really cool to me. I believe the challenge in bringing this into Sling relates to the encryption libraries. On Fri, Nov 3, 2017 at 8:45 AM Jason Bailey <jason.bai...@sas.com> wrote: > Here's the use case > > My organization has decided

RE: value level encryption - Donating?

, Jason Bailey <jason.bai...@sas.com> wrote: > It's all good. I have less meetings today then I normally would and the > exercise was beneficial as it got me thinking about other potential vectors. > > Since the key for this is configurable via the OSGi console I would have &g

RE: add github topics to projects

You missed a prior conversation about this from Bertrand last month. Unless things have changed with a github release, we don't have the permissions to add topics to Apache projects -Original Message- From: Nicolas Peltier [mailto:peltier.nico...@gmail.com] Sent: Friday, June 01, 2018

RE: Where do we put new git modules?

Couldn't this also be phrased as being that the import be squashed or rebased into a single commit prior to the import occurring? -Original Message- From: Robert Munteanu [mailto:romb...@apache.org] Sent: Wednesday, January 10, 2018 6:39 AM To: dev@sling.apache.org Subject: Re: Where

RE: [VOTE] Accept donation of Resource Encryption module - SLING-7225

+1 non-binding Awesome. -Original Message- From: Daniel Klco [mailto:dk...@apache.org] Sent: Tuesday, January 09, 2018 10:58 PM To: dev@sling.apache.org Subject: Re: [VOTE] Accept donation of Resource Encryption module - SLING-7225 EXTERNAL +1 Though I agree that a thorough review of

RE: Please welcome Jason Bailey, Sling committer

: Robert Munteanu [mailto:romb...@apache.org] Sent: Monday, January 22, 2018 11:47 AM To: dev@sling.apache.org Subject: Please welcome Jason Bailey, Sling committer EXTERNAL Hi Sling community, Based on his ongoing and valuable contributions to the project, the Sling PMC has elected Jason Bailey

RE: Search for specific resource types

So that I understand, this would benefit a scenario where you are searching for a specific resource type, and the search implementation would have to traverse up the resourceType hierarchy to determine if a specific type was of a type that you are looking for. One of the solutions for this, as

RE: Search for specific resource types

Yes, exactly. But if someone has a better idea on how to achieve that I am eager all ears. > On 12. Jan 2018, at 15:19, Jason Bailey <jason.bai...@sas.com> wrote: > > So that I understand, this would benefit a scenario where you are searching > for a specific resource ty

RE: New "capabilities" module, feedback welcome

There is an existing VersionInfoServlet in the Default Get servlets bundle. Would this module eliminate the need for that service? -Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Wednesday, June 20, 2018 9:39 AM To: dev Subject: New "capabilities"

RE: [VOTE] Release Apache Sling App CMS version 0.9.0 and Apache Sling File Optimization 0.9.0

+1 (non binding) -Original Message- From: Daniel Klco [mailto:dk...@apache.org] Sent: Thursday, July 26, 2018 10:11 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling App CMS version 0.9.0 and Apache Sling File Optimization 0.9.0 EXTERNAL This release is for a reference

documentation locations

Is there a determination on where the true source of documentation is? We have the sling-site project, we have the README in each individual project and the plugins are using the maven-sites-plugin. In Git projects it's usually the README or a unique docs folder. In a related note, if the

RE: Git force push

The methodology with GIT is usually around never committing anything directly to master, rather branch and merge. Internally I have our github projects set up to prevent force pushes to master and to allow it on branches so that the developer working on that branch has the option of fixing

RE: [ANN] New committer: Christian Schneider

Welcome Christian! -Original Message- From: Robert Munteanu Sent: Wednesday, June 19, 2019 5:38 AM To: dev@sling.apache.org Subject: [ANN] New committer: Christian Schneider EXTERNAL The Project Management Committee (PMC) for Apache Sling has invited Christian Schneider to become a

[jira] [Updated] (SLING-7760) Sling Main Servlet - Change header configuration to a service

[ https://issues.apache.org/jira/browse/SLING-7760?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jason Bailey updated SLING-7760: Summary: Sling Main Servlet - Change header configuration to a service (was: Contextual

[jira] [Updated] (SLING-7760) Sling Main Servlet - Change header configuration to a service

[ https://issues.apache.org/jira/browse/SLING-7760?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jason Bailey updated SLING-7760: Description: The ability to set headers must be done prior to any writing that occurs the output

[jira] [Commented] (SLING-7760) Sling Main Servlet - Change header configuration to a service

[ https://issues.apache.org/jira/browse/SLING-7760?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17013077#comment-17013077 ] Jason Bailey commented on SLING-7760: - [~cziegeler] that would be a great step in the right direction

[jira] [Commented] (SLING-9844) JCR ContentLoader - Import Breaks on Complex Node Structures

[ https://issues.apache.org/jira/browse/SLING-9844?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17218599#comment-17218599 ] Jason Bailey commented on SLING-9844: - It's been a while, but I see no reason why not to remove

[jira] [Comment Edited] (SLING-8243) Content Loader - support merge of properties and child nodes

[ https://issues.apache.org/jira/browse/SLING-8243?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17324997#comment-17324997 ] Jason Bailey edited comment on SLING-8243 at 4/19/21, 12:36 PM: It's been

[jira] [Commented] (SLING-8243) Content Loader - support merge of properties and child nodes

[ https://issues.apache.org/jira/browse/SLING-8243?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17324997#comment-17324997 ] Jason Bailey commented on SLING-8243: - It's been 2 1/2 years since I touched this code

[jira] [Commented] (SLING-10318) Content Loader - Fix merge and overwrite options

[ https://issues.apache.org/jira/browse/SLING-10318?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17324982#comment-17324982 ] Jason Bailey commented on SLING-10318: -- The idea here is that there was a need to have a feature