Perl 6 - the future is here, just unevenly distributed

IRC log for #openam, 2015-09-16

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:42 kala_ joined #openam
00:42 martv joined #openam
01:48 ilbot3 joined #openam
01:48 Topic for #openam is now Chat about the OpenAM project - https://backstage.forgerock.com/#/downloads - OpenAM 12.0.1 is out! OpenAM 11.0.3 is out! Channel logs at: http://irclog.perlgeek.de/openam/today
02:31 ilbot3 joined #openam
02:31 Topic for #openam is now Chat about the OpenAM project - https://backstage.forgerock.com/#/downloads - OpenAM 12.0.1 is out! OpenAM 11.0.3 is out! Channel logs at: http://irclog.perlgeek.de/openam/today
04:46 ramteid joined #openam
06:47 KermitTheFragger joined #openam
07:15 aldaris joined #openam
07:25 ramteid joined #openam
07:47 aldaris joined #openam
09:17 pifpaf joined #openam
10:46 aldaris joined #openam
11:22 jjpp joined #openam
11:22 jjpp hi.
11:22 aldaris hi
11:23 jjpp aldaris: is https://svn.forgerock.org/openam/trunk/openam the latest openam trunk?
11:23 aldaris yes
11:24 jjpp okay.. then I'm still a bit at loss wrt redirect callback. openam-core-rest/src/main/java/org/forgerock/openam/core/rest/authn/callbackhandlers/RestAuthRedirectCallbackHandler.java says that redirect callback is "write only"
11:24 jjpp I would say that it is not.
11:26 jjpp we use it to communicate with external authentication services -- we redirect/send user to some other site and it sends/posts result back to us.
11:27 jjpp if redirectcallback is not the way to do it, then.. what would be the right way?
11:32 jjpp (atm we have a patched/extended version of redirect callback logic at LVBs, we can say that we want POST instead of redirect and we can communicate received form data or all parameters to auth module if needed (although some modules still use httprequest, i'm afraid))
11:33 jjpp yet, using original httprequest will be much harder if we use some lightweight thing that uses rest api inside instead of daui, i guess?
11:35 aldaris the OAuth module uses the request to get data after the redirect
11:36 aldaris so, no, AFAIK we aren't using RedirectCallbacks for anything else than redirecting the user away
11:37 jjpp yeah, i know that this what happens at the moment. and i would argue that this should not be that way. :)
11:37 jjpp especially considering the fields that are (or were) present in module callback-definition xml for RedirectCallback :)
11:38 jjpp it looked like it was meant to be much more than what got implemented at first.
11:38 jjpp also, how does the oauth work over rest api?
11:39 aldaris magic
11:39 aldaris don't know :)
11:39 aldaris there are some ugly hacks in the module for sure
11:39 jjpp it assumes that the result/return is posted directly to rest endpoint?
11:39 aldaris probably those hacks don't always work.
11:39 aldaris I think XUI replays any parameters to the REST call
11:39 jjpp some of the oauth libraries assumed that it has access to HttpServletRequest, so it might be that it was tradeoff at some point for oauth
11:40 jjpp okay. i wonder what happens if there is name conflict between parameters of rest api and those that the service returned..
11:41 jjpp it would be "nice" to encapsulate whatever the user sent properly..
11:42 jjpp (also, we have our own little reverseproxy that tries to validate and restrict used parameters. the rules will be much more complicated, if we need to send those "as is"..:)
11:44 jjpp and.. if I develop something that allows to use redirectcallback bidirectionally, is there any hope that it will be included in openam14 or so?
11:46 * jjpp thinks . o O ( you should release 2 versions quickly and get to the point where openam X is released on year 2000+X :)
12:27 mckeanbs joined #openam
12:52 tudorg joined #openam
15:29 aldaris joined #openam
15:55 Reepicheep joined #openam
16:20 pcypher joined #openam
16:21 aldaris joined #openam
16:56 aldaris joined #openam
17:14 aldaris joined #openam
17:28 aldaris joined #openam
18:01 aldaris joined #openam
22:26 pcypher joined #openam
22:35 jjpp_ joined #openam

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary