[Registry-dev] authentication and authorization for the remote registry impl

[Sanjiva Weerawarana]

I don't think so because we're not doing it on the server side AFAIK.

We handle this correctly for the registry *UI* because that's driving an 
internal registry object and it makes sure all stuff is properly authn'ed 
and authz'ed.

Deepal/Glen?

Sanjiva.

Paul Fremantle wrote:
> I hope we are doing Basic Auth for Atom... that's certainly what I 
> expected we are doing.
> 
> Paul
> 
> Sanjiva Weerawarana wrote:
>> How do we do authentication for the remote reg??? Are we doing basic 
>> auth for the atom stream? I don't think I have a good handle on how 
>> that's being done.
>>
>> Authzn is ok - once authn has gone thru the server side handles 
>> authzn. Just need to sort out authn. I think.
>>
>> Sanjiva.
> 

-- 
Sanjiva Weerawarana, Ph.D.
Founder, Chairman & CEO; WSO2, Inc.; http://www.wso2.com/
email: sanjiva at wso2.com; cell: +1 650 265 8311 | +94 77 787 6880

"Oxygenating the Web Service Platform."