Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 176956

Summary:	[server] support declarative security in httpcontexts extension-point
Product:	[Eclipse Project] Equinox	Reporter:	Simon Kaegi <simon_kaegi>
Component:	Server-Side	Assignee:	equinox.compendium-inbox <equinox.compendium-inbox>
Status:	RESOLVED WONTFIX	QA Contact:
Severity:	enhancement
Priority:	P3	CC:	gunnar, raymond.auge, tjwatson
Version:	3.3
Target Milestone:	---
Hardware:	All
OS:	All
Whiteboard:

Description Simon Kaegi

2007-03-12 00:59:00 EDT

A recent posting in the newsgroup asked for this functionality. 

The Servlet spec details a fair bit of behaviour here around authenticators and role support. Before we consider adding this sort of functionality we'll need to consider how to integrate with other OSGI services like user admin and role assignment. For the authenticators, we might want to consider using an existing implementation thats tried and tested. 

Discussions, advice and contributions welcome here as I suspect this enhancement should be approached with a bit of caution.

Comment 1 Thomas Watson

2015-03-18 08:17:49 EDT

Just to track it.  The http whiteboard specification does not really have a declarative (services) approach to security that is much better than the old HttpContext approach.  Leaving this bug open for now.

Comment 2 Raymond Auge

2018-01-22 23:12:28 EST

Maybe we need to design a security whiteboard?

Comment 3 Thomas Watson

2018-01-23 08:32:40 EST

(In reply to Raymond Auge from comment #2)
> Maybe we need to design a security whiteboard?

Are suggesting an Equinox designed whiteboard, or proposing a spec'ed solution in OSGi?  Unless we have a high demand to have a solution in Equinox, I suggest bring up the discussion in OSGi.

Comment 4 Raymond Auge

2018-01-23 10:06:29 EST

(In reply to Thomas Watson from comment #3)
> (In reply to Raymond Auge from comment #2)
> > Maybe we need to design a security whiteboard?
> 
> Are suggesting an Equinox designed whiteboard, or proposing a spec'ed
> solution in OSGi?  Unless we have a high demand to have a solution in
> Equinox, I suggest bring up the discussion in OSGi.

Yes so should we just coke this issue since it's not likely that we do anything with this one?

Comment 5 Thomas Watson

2018-01-24 09:01:12 EST

(In reply to Raymond Auge from comment #4)
> (In reply to Thomas Watson from comment #3)
> > (In reply to Raymond Auge from comment #2)
> > > Maybe we need to design a security whiteboard?
> > 
> > Are suggesting an Equinox designed whiteboard, or proposing a spec'ed
> > solution in OSGi?  Unless we have a high demand to have a solution in
> > Equinox, I suggest bring up the discussion in OSGi.
> 
> Yes so should we just coke this issue since it's not likely that we do
> anything with this one?

Assuming coke means close ... yes :)

Now I want a Coke.