geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "John D. Ament" <johndam...@apache.org>
Subject Re: Other MP Specs @ Geronimo?
Date Sun, 30 Jul 2017 21:53:54 GMT
On Sun, Jul 30, 2017 at 5:44 PM Romain Manni-Bucau <rmannibucau@gmail.com>
wrote:

> Is there any actual spec?
>

Not sure what you mean.  Rhetorical question?


>
> For jwt we can impl from scratch, it is not hard and would avoid  a big
> dep and enable some consistency using jsonb.
>

JWT is a lot more complicated than that.  It's more than reading the JSON,
but also ensuring proper crypto signatures, on the generation and
consumption side.  You need to be able to reach out to other servers to
fetch keys and handle extra validation checks.  There's a standard set of
claims that's being requested as well.  Yes, the json smart dependency
bites, maybe we can convince the author to switch to the javax.json
namespace?



>
>
> Le 30 juil. 2017 23:28, "John D. Ament" <johndament@apache.org> a écrit :
>
> All,
>
> I know Mark brought in Config to Geronimo.  We have at least 3 more specs
> coming in MP 1.2 (Fault Tolerance, Health, JWT Processing), possibly
> Metrics and OpenTracing.
>
> I have a fully functioning JWT Processing impl based on jose (
> https://bitbucket.org/connect2id/nimbus-jose-jwt/src ) which I'd be happy
> to bring over to Geronimo.
>
> Health is a tricky one, may make sense to start from scratch, or bring in
> pieces of the former Sirona podling to start a health checker.
>
> I had started on a Fault Tolerance implementation, based on the work from
> failsafe.  However, from talking to the developer offline I'm a bit worried
> about relying on Failsafe.
>
> Any thoughts on bringing these into Geronimo?
>
> John
>
>
>

Mime
View raw message