You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cxf.apache.org by Polar Humenn <ph...@iona.com> on 2007/05/01 16:59:06 UTC
HTTP (Proxy) Authorization Policy
Greetings,
Currently the HTTP Authorization Policy is set on the Bus, Endpoint,
Message etc. maps by keying it on its class.
The problem is that the AuthorizationPolicy class is used for both the
user authorization and proxy authorization. Therefore the "proxy"
authorization policy can't be set by this method.
This could easily be fixed by creating a trivial extension
public class ProxyAuthorizationPolicy extends AuthorizationPolicy {}
There may be a little work to make spring config work, i.e.
setProxyAuthorization(), but not much.
What are people's thoughts?
Cheers,
-Polar
Re: HTTP (Proxy) Authorization Policy
Posted by Dan Diephouse <da...@envoisolutions.com>.
Agreed. I think the proposed solution is reasonable, but it doesn't exactly
strike me as pretty - which is why I hadn't responded quite yet. :-)
Granted, I don't have any better ideas, so maybe thats the best way to go.
Cheers,
- Dan
On 5/2/07, Fred Dushin <fr...@dushin.net> wrote:
>
> Sounds like a flesh-and-blood bug to me, so I'd file it.
>
> On May 2, 2007, at 11:04 AM, Polar Humenn wrote:
>
> > Does anybody mind if I file a JIRA on this issue?
> > -Polar
> >
> > Polar Humenn wrote:
> >> Greetings,
> >>
> >> Currently the HTTP Authorization Policy is set on the Bus,
> >> Endpoint, Message etc. maps by keying it on its class.
> >>
> >> The problem is that the AuthorizationPolicy class is used for both
> >> the user authorization and proxy authorization. Therefore the
> >> "proxy" authorization policy can't be set by this method.
> >>
> >> This could easily be fixed by creating a trivial extension
> >>
> >> public class ProxyAuthorizationPolicy extends AuthorizationPolicy {}
> >>
> >> There may be a little work to make spring config work, i.e.
> >> setProxyAuthorization(), but not much.
> >>
> >> What are people's thoughts?
> >>
> >> Cheers,
> >> -Polar
> >
> >
>
>
--
Dan Diephouse
Envoi Solutions
http://envoisolutions.com | http://netzooid.com/blog
Re: HTTP (Proxy) Authorization Policy
Posted by Fred Dushin <fr...@dushin.net>.
Sounds like a flesh-and-blood bug to me, so I'd file it.
On May 2, 2007, at 11:04 AM, Polar Humenn wrote:
> Does anybody mind if I file a JIRA on this issue?
> -Polar
>
> Polar Humenn wrote:
>> Greetings,
>>
>> Currently the HTTP Authorization Policy is set on the Bus,
>> Endpoint, Message etc. maps by keying it on its class.
>>
>> The problem is that the AuthorizationPolicy class is used for both
>> the user authorization and proxy authorization. Therefore the
>> "proxy" authorization policy can't be set by this method.
>>
>> This could easily be fixed by creating a trivial extension
>>
>> public class ProxyAuthorizationPolicy extends AuthorizationPolicy {}
>>
>> There may be a little work to make spring config work, i.e.
>> setProxyAuthorization(), but not much.
>>
>> What are people's thoughts?
>>
>> Cheers,
>> -Polar
>
>
Re: HTTP (Proxy) Authorization Policy
Posted by Polar Humenn <ph...@iona.com>.
Does anybody mind if I file a JIRA on this issue?
-Polar
Polar Humenn wrote:
> Greetings,
>
> Currently the HTTP Authorization Policy is set on the Bus, Endpoint,
> Message etc. maps by keying it on its class.
>
> The problem is that the AuthorizationPolicy class is used for both the
> user authorization and proxy authorization. Therefore the "proxy"
> authorization policy can't be set by this method.
>
> This could easily be fixed by creating a trivial extension
>
> public class ProxyAuthorizationPolicy extends AuthorizationPolicy {}
>
> There may be a little work to make spring config work, i.e.
> setProxyAuthorization(), but not much.
>
> What are people's thoughts?
>
> Cheers,
> -Polar