You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@synapse.apache.org by "Hiranya Jayathilaka (JIRA)" <ji...@apache.org> on 2013/08/08 02:22:49 UTC

[jira] [Resolved] (SYNAPSE-953) Introducing transport level (HTTPs etc.) access restriction to Rest APIs

     [ https://issues.apache.org/jira/browse/SYNAPSE-953?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Hiranya Jayathilaka resolved SYNAPSE-953.
-----------------------------------------

       Resolution: Fixed
    Fix Version/s:     (was: 1.1.1)
                   NIGHTLY

Patch applied with some modifications:

1. Changed the attribute name from "transports" to "transport" (it only supports a single protocol name)
2. Used the getIncomingTransportName() method to get the transport name instead of getTransport().getName(). (This is consistent with the Resource class)
3. Added separate serialization test cases
4. Added a new test case in APIDispatcherTest

Thanks Ruwan for the contribution.
                
> Introducing transport level (HTTPs etc.) access restriction to Rest APIs
> ------------------------------------------------------------------------
>
>                 Key: SYNAPSE-953
>                 URL: https://issues.apache.org/jira/browse/SYNAPSE-953
>             Project: Synapse
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 1.1
>            Reporter: Ruwan
>            Assignee: Hiranya Jayathilaka
>              Labels: features, patch
>             Fix For: NIGHTLY
>
>         Attachments: rest_api_transport_access_restriction.patch, rest_api_transport_access_restriction_v2.patch
>
>
> There is no way to enforce transport level access restrictions to APIs, like on proxy services.
> This can be addressed by adding a property called "transports" to the API configuration XML, based on which, access to said API can be granted or deflected.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@synapse.apache.org
For additional commands, e-mail: dev-help@synapse.apache.org