[Registry-dev] Authorization model of the registry

Deepal Jayasinghe deepal at wso2.com
Thu Jan 3 01:41:48 PST 2008


> The thing I like about this approach is that we've figured out a way
> to cleanly marry basic auth (which is critical for programmatic HTTP
> access) and auth via a form, which is important for nice UI access.
> Very cool.
>
> Deepal- can you send a note to abdera-dev about the lack of HTTP
> session support and ask whether they have plans to implement it? Its
> really simple to do it .. so if they're not doing it we can do it and
> give a patch.
Done.
> Let's go ahead by implementing it with by sending the Authorization
> header each time, but that's expensive on the server side as we'll
> have to re-authenticate every single time.
yes, I will investigate and see whether I can do something (Abdera does
not have a single document for server side)

-Deepal




More information about the Registry-dev mailing list