[Registry-dev] authentication and authorization for the remote registry impl

[Glen Daniels]

The intent is definitely to support basic auth (and I think we should do 
client certs too), but I don't think it's implemented yet.

--Glen

Sanjiva Weerawarana wrote:
> I don't think so because we're not doing it on the server side AFAIK.
> 
> We handle this correctly for the registry *UI* because that's driving an 
> internal registry object and it makes sure all stuff is properly 
> authn'ed and authz'ed.
> 
> Deepal/Glen?
> 
> Sanjiva.
> 
> Paul Fremantle wrote:
>> I hope we are doing Basic Auth for Atom... that's certainly what I 
>> expected we are doing.
>>
>> Paul
>>
>> Sanjiva Weerawarana wrote:
>>> How do we do authentication for the remote reg??? Are we doing basic 
>>> auth for the atom stream? I don't think I have a good handle on how 
>>> that's being done.
>>>
>>> Authzn is ok - once authn has gone thru the server side handles 
>>> authzn. Just need to sort out authn. I think.
>>>
>>> Sanjiva.
>>
>