CP2JavaWS 0.5 release : full digest and state support

Posted: April 22, 2009 in IT/Dev
Tags: , , , , , , , , , ,

A new 0.5 version of CP2JavaWS bridge is available at Sourceforge. It includes the following new features :

– full digest authentication (rfc2617) support (tested on Safari and Firefox), with automatic retrigger of original connection.
Besides digest parameters settings (nonce life, realm, etc.), the authentication filter allows to set list of services that require (or not) authentication (using includes and excludes).
Authentication occurs only once (for the first service that requires it).

Note : only works with sameDomain (when using JSONP digest authentication could happen, but there is no mean to check response status nor retrieve response headers – see security considerations)

– session/state management : JSESSIONID cookie is automatically retrieved once authentication challenge ends (Authentication-info response header with Ok code) and added to following requests (had to be coded for Safari – Firefox handles it natively).

Note : only works with sameDomain (when using JSONP, for security reason the server isn’t allowed to set a cookie to the client, as it originates from another domain).

– a new Habilitation fillter has been added : it allows (through a custom habilitation service) to set access rules for services, depending on the user, remote service and method called (these rules apply after authentication check).

– sameDomain setting moved from remoteService to endPoint (the same for all services of a web app).

– the packaged cp2javaws-filter.jar now includes the right files (sources files were ok however).

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s