From 200a40b332420f94992eb39a6d0ea1cf1490ffc4 Mon Sep 17 00:00:00 2001 From: coreyg Date: Fri, 21 Nov 2014 09:30:19 +0000 Subject: Adding tuscany's website to their svn repo for svnpubsub git-svn-id: http://svn.us.apache.org/repos/asf/tuscany@1640879 13f79535-47bb-0310-9956-ffa450edef68 --- .../sca-java-bindinghttp-security-policy.html | 240 +++++++++++++++++++++ 1 file changed, 240 insertions(+) create mode 100644 site/trunk/site-publish/sca-java-bindinghttp-security-policy.html (limited to 'site/trunk/site-publish/sca-java-bindinghttp-security-policy.html') diff --git a/site/trunk/site-publish/sca-java-bindinghttp-security-policy.html b/site/trunk/site-publish/sca-java-bindinghttp-security-policy.html new file mode 100644 index 0000000000..795ca0da56 --- /dev/null +++ b/site/trunk/site-publish/sca-java-bindinghttp-security-policy.html @@ -0,0 +1,240 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + SCA Java binding.http security policy : Apache Tuscany + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + + + + + + + + +   + + + +
+ + + + + +
+ +
+ + + + + + + + + + + + + + + + + +
+ +  Apache Tuscany > Home > SCA Overview > SCA Java > Java SCA Documentation Menu > SCA Java binding.http security policy + + + + User List | Dev List | Issue Tracker   + +
+ + + + + + + + + + + + +
+ + +
+ + + + +
+ +
+ + + +
+
General
+

Home
+License
+Get Involved
+Found a Bug?

+
+ +
SCA Java
+

SCA Java Home
+FAQ
+Downloads
+Documentation
+Tools
+Source Code

+
+ +
Documentation
+

User Guide
+Architecture Guide
+Developer Guide
+Extension Developer Guide

+
+ +
Resources
+

FAQ
+Source Code

+
+		 + +

Security Policy support in HTTP and Web 2.0 Bindings

+ +
work in progress
+ +

Scenarios

+ +

+ +
    +
  • A Web 2.0 application requires that a user get authenticated before it can access the application.
    • +
  • A Web 2.0 application requires that all communication between client/server be done using SSL.
    • +
  • A given service, exposed using a web 2.0 binding requires user authentication.
    • +
  • A given operation, exposed using a web 2.0 binding requires user authentication.
    • +
+ + +

Policy Interceptor

+ +

The design approach that is being considered is to inject policy security interceptors, that would properly validate and enforce the security intents.
+The authentication will be done using JAAS modules for authentication, and initially we would support authenticating to a list of username/password supplied by the application or using an LDAP.

+ +

+
+ +
+ +
+ +
+ + +
+ + + + + + + + + + + + + website stats + + + +
+ + Copyright © 2003-2007, The Apache Software Foundation   + +
+ + + + + + + \ No newline at end of file -- cgit v1.2.3