You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cxf.apache.org by Oliver Wulff <ow...@talend.com> on 2012/03/29 13:18:21 UTC

Roadmap for fediz in sandbox

Hi all

I've initially committed the fediz component to sandbox some months back:
http://svn.apache.org/viewvc/cxf/sandbox/fediz/

I'd like to come up with a roadmap for the fediz security component as proposed by Colm in the following mail thread:

http://mail-archives.apache.org/mod_mbox/cxf-users/201203.mbox/ajax/%3CCAB8XdGAKVjb6EVJbccUWyA-nwZci_xKjZ1%3DHXK6XhCUeAjU1vQ%40mail.gmail.com%3E


Roadmap
-------------

1st release (end of april):
- Move configuration code to fediz-core
- Publish WS-Federation Metadata document
- Move SignIn request creation to fediz-core
- support callback handlers for federation parameters: wauth, whr,

2nd release (end of june):
- Create CXF plugin for JAX-RS
- Create Websphere plugin based on TAI
- Support encrypted token
- Support the role of relying party IDP in mock
- Support SAML HoK:
      either use UseKey element in RST
      or collocate STS in IDP thus STS has access to underlying transport
- add layer to support other protocols like SAML-P, OAuth

3rd release (end of september):
- create JBoss plugin
- create Jetty plugin


Do you see any other features?

Thanks
Oli




------

Oliver Wulff

Blog: http://owulff.blogspot.com<http://owulff.blogspot.com/>
Solution Architect
http://coders.talend.com

<http://coders.talend.com>Talend Application Integration Division http://www.talend.com

Re: Roadmap for fediz in sandbox

Posted by Sergey Beryozkin <sb...@gmail.com>.
As far as the providing Fedix CXF extensions, the one for making the IDP 
server running on top of CXF JAX-RS, as an alternative to the existing 
servlet option, is definitely part of the 2nd release plan,

I'm wondering though if the CXF JAX-RS filters for protecting the 
endpoints as part of SAML-P/Redirect flows (currently incomplete) which 
I prototyped based on Colm's tests would belong to the Fediz project or 
not, at the moment I'm assuming that not as they kind of supposed to 
work even when non Fediz IDPs are around,

It's a minor issue though, as Fediz is going to become a star 
sub-project :-)

Cheers, Sergey

On 02/04/12 21:20, Sergey Beryozkin wrote:
> +1
>
> Sergey
>
> On 02/04/12 18:40, Colm O hEigeartaigh wrote:
>> Sounds good to me as well. So the consensus is it should be a CXF
>> sub-project?
>>
>> Colm.
>>
>> On Thu, Mar 29, 2012 at 9:58 PM, Daniel Kulp<dk...@apache.org> wrote:
>>>
>>> Sure. We should likely move it from the sandbox into /cxf/fediz/trunk or
>>> similar as well.
>>>
>>> Dan
>>>
>>>
>>> On Thursday, March 29, 2012 11:18:21 AM Oliver Wulff wrote:
>>>> Hi all
>>>>
>>>> I've initially committed the fediz component to sandbox some months
>>>> back:
>>>> http://svn.apache.org/viewvc/cxf/sandbox/fediz/
>>>>
>>>> I'd like to come up with a roadmap for the fediz security component as
>>>> proposed by Colm in the following mail thread:
>>>>
>>>> http://mail-archives.apache.org/mod_mbox/cxf-users/201203.mbox/ajax/%3CCAB
>>>>
>>>> 8XdGAKVjb6EVJbccUWyA-nwZci_xKjZ1%3DHXK6XhCUeAjU1vQ%40mail.gmail.com%3E
>>>>
>>>>
>>>> Roadmap
>>>> -------------
>>>>
>>>> 1st release (end of april):
>>>> - Move configuration code to fediz-core
>>>> - Publish WS-Federation Metadata document
>>>> - Move SignIn request creation to fediz-core
>>>> - support callback handlers for federation parameters: wauth, whr,
>>>>
>>>> 2nd release (end of june):
>>>> - Create CXF plugin for JAX-RS
>>>> - Create Websphere plugin based on TAI
>>>> - Support encrypted token
>>>> - Support the role of relying party IDP in mock
>>>> - Support SAML HoK:
>>>> either use UseKey element in RST
>>>> or collocate STS in IDP thus STS has access to underlying transport
>>>> - add layer to support other protocols like SAML-P, OAuth
>>>>
>>>> 3rd release (end of september):
>>>> - create JBoss plugin
>>>> - create Jetty plugin
>>>>
>>>>
>>>> Do you see any other features?
>>>>
>>>> Thanks
>>>> Oli
>>>>
>>>>
>>>>
>>>>
>>>> ------
>>>>
>>>> Oliver Wulff
>>>>
>>>> Blog: http://owulff.blogspot.com<http://owulff.blogspot.com/>
>>>> Solution Architect
>>>> http://coders.talend.com
>>>>
>>>> <http://coders.talend.com>Talend Application Integration Division
>>>> http://www.talend.com
>>> --
>>> Daniel Kulp
>>> dkulp@apache.org - http://dankulp.com/blog
>>> Talend Community Coder - http://coders.talend.com
>>>
>>
>>
>>
>
>


-- 
Sergey Beryozkin

Talend Community Coders
http://coders.talend.com/

Blog: http://sberyozkin.blogspot.com

Re: Roadmap for fediz in sandbox

Posted by Sergey Beryozkin <sb...@gmail.com>.
+1

Sergey

On 02/04/12 18:40, Colm O hEigeartaigh wrote:
> Sounds good to me as well. So the consensus is it should be a CXF sub-project?
>
> Colm.
>
> On Thu, Mar 29, 2012 at 9:58 PM, Daniel Kulp<dk...@apache.org>  wrote:
>>
>> Sure.   We should likely move it from the sandbox into /cxf/fediz/trunk or
>> similar as well.
>>
>> Dan
>>
>>
>> On Thursday, March 29, 2012 11:18:21 AM Oliver Wulff wrote:
>>> Hi all
>>>
>>> I've initially committed the fediz component to sandbox some months back:
>>> http://svn.apache.org/viewvc/cxf/sandbox/fediz/
>>>
>>> I'd like to come up with a roadmap for the fediz security component as
>>> proposed by Colm in the following mail thread:
>>>
>>> http://mail-archives.apache.org/mod_mbox/cxf-users/201203.mbox/ajax/%3CCAB
>>> 8XdGAKVjb6EVJbccUWyA-nwZci_xKjZ1%3DHXK6XhCUeAjU1vQ%40mail.gmail.com%3E
>>>
>>>
>>> Roadmap
>>> -------------
>>>
>>> 1st release (end of april):
>>> - Move configuration code to fediz-core
>>> - Publish WS-Federation Metadata document
>>> - Move SignIn request creation to fediz-core
>>> - support callback handlers for federation parameters: wauth, whr,
>>>
>>> 2nd release (end of june):
>>> - Create CXF plugin for JAX-RS
>>> - Create Websphere plugin based on TAI
>>> - Support encrypted token
>>> - Support the role of relying party IDP in mock
>>> - Support SAML HoK:
>>>        either use UseKey element in RST
>>>        or collocate STS in IDP thus STS has access to underlying transport
>>> - add layer to support other protocols like SAML-P, OAuth
>>>
>>> 3rd release (end of september):
>>> - create JBoss plugin
>>> - create Jetty plugin
>>>
>>>
>>> Do you see any other features?
>>>
>>> Thanks
>>> Oli
>>>
>>>
>>>
>>>
>>> ------
>>>
>>> Oliver Wulff
>>>
>>> Blog: http://owulff.blogspot.com<http://owulff.blogspot.com/>
>>> Solution Architect
>>> http://coders.talend.com
>>>
>>> <http://coders.talend.com>Talend Application Integration Division
>>> http://www.talend.com
>> --
>> Daniel Kulp
>> dkulp@apache.org - http://dankulp.com/blog
>> Talend Community Coder - http://coders.talend.com
>>
>
>
>


-- 
Sergey Beryozkin

Talend Community Coders
http://coders.talend.com/

Blog: http://sberyozkin.blogspot.com

Re: Roadmap for fediz in sandbox

Posted by Colm O hEigeartaigh <co...@apache.org>.
Sounds good to me as well. So the consensus is it should be a CXF sub-project?

Colm.

On Thu, Mar 29, 2012 at 9:58 PM, Daniel Kulp <dk...@apache.org> wrote:
>
> Sure.   We should likely move it from the sandbox into /cxf/fediz/trunk or
> similar as well.
>
> Dan
>
>
> On Thursday, March 29, 2012 11:18:21 AM Oliver Wulff wrote:
>> Hi all
>>
>> I've initially committed the fediz component to sandbox some months back:
>> http://svn.apache.org/viewvc/cxf/sandbox/fediz/
>>
>> I'd like to come up with a roadmap for the fediz security component as
>> proposed by Colm in the following mail thread:
>>
>> http://mail-archives.apache.org/mod_mbox/cxf-users/201203.mbox/ajax/%3CCAB
>> 8XdGAKVjb6EVJbccUWyA-nwZci_xKjZ1%3DHXK6XhCUeAjU1vQ%40mail.gmail.com%3E
>>
>>
>> Roadmap
>> -------------
>>
>> 1st release (end of april):
>> - Move configuration code to fediz-core
>> - Publish WS-Federation Metadata document
>> - Move SignIn request creation to fediz-core
>> - support callback handlers for federation parameters: wauth, whr,
>>
>> 2nd release (end of june):
>> - Create CXF plugin for JAX-RS
>> - Create Websphere plugin based on TAI
>> - Support encrypted token
>> - Support the role of relying party IDP in mock
>> - Support SAML HoK:
>>       either use UseKey element in RST
>>       or collocate STS in IDP thus STS has access to underlying transport
>> - add layer to support other protocols like SAML-P, OAuth
>>
>> 3rd release (end of september):
>> - create JBoss plugin
>> - create Jetty plugin
>>
>>
>> Do you see any other features?
>>
>> Thanks
>> Oli
>>
>>
>>
>>
>> ------
>>
>> Oliver Wulff
>>
>> Blog: http://owulff.blogspot.com<http://owulff.blogspot.com/>
>> Solution Architect
>> http://coders.talend.com
>>
>> <http://coders.talend.com>Talend Application Integration Division
>> http://www.talend.com
> --
> Daniel Kulp
> dkulp@apache.org - http://dankulp.com/blog
> Talend Community Coder - http://coders.talend.com
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: Roadmap for fediz in sandbox

Posted by Daniel Kulp <dk...@apache.org>.
Sure.   We should likely move it from the sandbox into /cxf/fediz/trunk or 
similar as well.

Dan


On Thursday, March 29, 2012 11:18:21 AM Oliver Wulff wrote:
> Hi all
> 
> I've initially committed the fediz component to sandbox some months back:
> http://svn.apache.org/viewvc/cxf/sandbox/fediz/
> 
> I'd like to come up with a roadmap for the fediz security component as
> proposed by Colm in the following mail thread:
> 
> http://mail-archives.apache.org/mod_mbox/cxf-users/201203.mbox/ajax/%3CCAB
> 8XdGAKVjb6EVJbccUWyA-nwZci_xKjZ1%3DHXK6XhCUeAjU1vQ%40mail.gmail.com%3E
> 
> 
> Roadmap
> -------------
> 
> 1st release (end of april):
> - Move configuration code to fediz-core
> - Publish WS-Federation Metadata document
> - Move SignIn request creation to fediz-core
> - support callback handlers for federation parameters: wauth, whr,
> 
> 2nd release (end of june):
> - Create CXF plugin for JAX-RS
> - Create Websphere plugin based on TAI
> - Support encrypted token
> - Support the role of relying party IDP in mock
> - Support SAML HoK:
>       either use UseKey element in RST
>       or collocate STS in IDP thus STS has access to underlying transport
> - add layer to support other protocols like SAML-P, OAuth
> 
> 3rd release (end of september):
> - create JBoss plugin
> - create Jetty plugin
> 
> 
> Do you see any other features?
> 
> Thanks
> Oli
> 
> 
> 
> 
> ------
> 
> Oliver Wulff
> 
> Blog: http://owulff.blogspot.com<http://owulff.blogspot.com/>
> Solution Architect
> http://coders.talend.com
> 
> <http://coders.talend.com>Talend Application Integration Division
> http://www.talend.com
-- 
Daniel Kulp
dkulp@apache.org - http://dankulp.com/blog
Talend Community Coder - http://coders.talend.com


Re: Roadmap for fediz in sandbox

Posted by scmakhaye <sc...@gmail.com>.
I also think that it a very good Roadmap .... we shall give support as we
need be ..

-----

_ _ _ _ _ _ _ 

Siboniso Makhaye
--
View this message in context: http://cxf.547215.n5.nabble.com/Roadmap-for-fediz-in-sandbox-tp5603441p5613805.html
Sent from the cxf-dev mailing list archive at Nabble.com.