FWD » Core Development » Runtime Infrastructure

10/04/2024

06:42 AM Feature #6377: provide tooling (and UI in the admin interface) to manage appserver agents (start/...

Galya B wrote:
> Constantin, I had to remove @security:certificate:validate@ as you asked me in #7808-115, because i... Constantin Asofiei

06:25 AM Feature #6377: provide tooling (and UI in the admin interface) to manage appserver agents (start/...

Constantin, I had to remove @security:certificate:validate@ as you asked me in #7808-115, because it took me quite a ... Galya B

05:10 AM Feature #6377: provide tooling (and UI in the admin interface) to manage appserver agents (start/...

Galya B wrote:
> For now I'm implementing only displaying the info read-only. If we add edit functionality later on,... Constantin Asofiei

05:09 AM Feature #6377: provide tooling (and UI in the admin interface) to manage appserver agents (start/...

For now I'm implementing only displaying the info read-only. If we add edit functionality later on, an error can be s... Galya B

05:05 AM Feature #6377: provide tooling (and UI in the admin interface) to manage appserver agents (start/...

Galya B wrote:
> @SecurityCache.getAccountsForAppserver@ returns an array, but I guess I should just ignore it and c... Constantin Asofiei

04:14 AM Feature #6377: provide tooling (and UI in the admin interface) to manage appserver agents (start/...

@SecurityCache.getAccountsForAppserver@ returns an array, but I guess I should just ignore it and consider the first ... Galya B

04:13 AM Feature #6377: provide tooling (and UI in the admin interface) to manage appserver agents (start/...

Galya B wrote:
> A question: can there be several processes configured for one appserver? Is this a way to simply ha... Constantin Asofiei

04:02 AM Feature #6377: provide tooling (and UI in the admin interface) to manage appserver agents (start/...

A question: can there be several processes configured for one appserver? Is this a way to simply have different FWD c... Galya B

10/03/2024

01:33 PM Feature #6377: provide tooling (and UI in the admin interface) to manage appserver agents (start/...

There is a lot more work to get all the data in one place. The tables seem to need fixed height, which is not ideal, ... Galya B

10/01/2024

07:26 AM Feature #7080: expose all admin APIs via REST

Yes, we can consider Swagger. Greg Shah

07:18 AM Feature #7080: expose all admin APIs via REST

Always the third option. :) OK, now speaking about REST API, can we consider doing it properly using swagger (having ... Galya B

07:15 AM Feature #7080: expose all admin APIs via REST

Forget GWT, it is not the real issue here. The key point is to ensure that all of our admin APIs are REST based. If... Greg Shah

06:24 AM Feature #7080: expose all admin APIs via REST

The auth aside, the GWT problem with reusing REST is that it's a framework that generates code both server-side and c... Galya B

05:53 AM Feature #7080: expose all admin APIs via REST

OK, let's call the tokens 'auth token' and 'request token' for clarity, because I get confused. So the admin has an a... Galya B

05:39 AM Feature #7080: expose all admin APIs via REST

Galya B wrote:
> Greg Shah wrote:
> > Actually, this corresponds to your suggestion from #7080-26 except I would ex... Greg Shah

05:35 AM Feature #7080: expose all admin APIs via REST

Greg Shah wrote:
> Actually, this corresponds to your suggestion from #7080-26 except I would expect to store the ke... Galya B

05:31 AM Feature #7080: expose all admin APIs via REST

> We can later build a more intricate authorization and associate permissions for each path
FYI, we already have a... Greg Shah

05:30 AM Feature #7080: expose all admin APIs via REST

Actually, this corresponds to your suggestion from #7080-26 except I would expect to store the key/token in the direc... Greg Shah

02:35 AM Feature #7080: expose all admin APIs via REST

I believe you speak about the key that will come with each request. I was asking about the initial authentication. Galya B

09/30/2024

11:54 AM Feature #7080: expose all admin APIs via REST

For API access, I would expect a cryptographically signed token to be issued (an "API key"). This has advantages ove... Greg Shah

01:11 AM Feature #7080: expose all admin APIs via REST

Greg Shah wrote:
> > A persistent token in directory will do exactly the same as the fwd pass.
>
> That is OK. T... Galya B

09/25/2024

03:45 PM Feature #7080: expose all admin APIs via REST

> I have another idea then: leave it to the customers completely. Ask them to implement an authenticator and pass in ... Greg Shah

03:40 PM Feature #7080: expose all admin APIs via REST

> A persistent token in directory will do exactly the same as the fwd pass.
That is OK. There is no issue with st... Greg Shah

02:06 PM Feature #7080: expose all admin APIs via REST

I have another idea then: leave it to the customers completely. Ask them to implement an authenticator and pass in th... Galya B

02:01 PM Feature #7080: expose all admin APIs via REST

A persistent token in directory will do exactly the same as the fwd pass. Galya B

01:57 PM Feature #7080: expose all admin APIs via REST

Galya B wrote:
> The token generated by the admin will not expire until deleted from the console and can be used in ... Greg Shah

01:55 PM Feature #7080: expose all admin APIs via REST

Constantin Asofiei wrote:
> The authentication method should be configurable, for tenant is hard-coded to 'basic'. ... Greg Shah

01:34 PM Feature #7080: expose all admin APIs via REST

The token generated by the admin will not expire until deleted from the console and can be used in an admin app and i... Galya B

01:24 PM Feature #7080: expose all admin APIs via REST

We can have a functionality in Admin console to generate a token, that is stored in the DB. It can be used to ask @/a... Galya B

01:17 PM Feature #7080: expose all admin APIs via REST

Do we consider FWD account's password hashed and stored in directory.xml secure? Galya B

01:12 PM Feature #7080: expose all admin APIs via REST

The authentication method should be configurable, for tenant is hard-coded to 'basic'. After that, additional auth m... Constantin Asofiei

01:09 PM Feature #7080: expose all admin APIs via REST

Galya B wrote:
> The tenant api uses @BasicAuth@ for authentication that accepts a FWD account's username and its we... Greg Shah

12:53 PM Feature #7080: expose all admin APIs via REST

The tenant api uses @BasicAuth@ for authentication that accepts a FWD account's username and its webServiceToken as a... Galya B

11:38 AM Feature #7080: expose all admin APIs via REST

Greg Shah wrote:
> > Also, I believe @admin/login@ is used for logging in the admin console, while @admin/tenant/log... Galya B

10:20 AM Feature #7080: expose all admin APIs via REST

Radu Apetrii wrote:
> Yes, I will add this to the wiki. However, there's one thing I'm unsure about. These users tha... Greg Shah

10:15 AM Feature #7080: expose all admin APIs via REST

Radu Apetrii wrote:
> Yes, I will add this to the wiki. However, there's one thing I'm unsure about. These users tha... Galya B

10:14 AM Feature #7080: expose all admin APIs via REST

> Also, I believe @admin/login@ is used for logging in the admin console, while @admin/tenant/login@ is for getting a... Greg Shah

10:05 AM Feature #7080: expose all admin APIs via REST

Yes, I will add this to the wiki. However, there's one thing I'm unsure about. These users that are in the @<node cla... Radu Apetrii

10:01 AM Feature #7080: expose all admin APIs via REST

Radu Apetrii wrote:
> Galya B wrote:
> > Radu, would you confirm how the endpoint @admin/tenant/login@ is supposed ... Galya B

10:00 AM Feature #7080: expose all admin APIs via REST

Galya B wrote:
> Radu, would you confirm how the endpoint @admin/tenant/login@ is supposed to be used. Please check ... Radu Apetrii

09:40 AM Feature #7080: expose all admin APIs via REST

Radu, would you confirm how the endpoint @admin/tenant/login@ is supposed to be used. Please check the above notes. Galya B

08:51 AM Feature #7080: expose all admin APIs via REST

It is indeed @admin/tenant/login@ as the doc says, but I don't see provisioning for anonymous login without @Authoriz... Galya B

08:48 AM Feature #7080: expose all admin APIs via REST

I would have expected it to be @/admin/login@. Greg Shah

08:30 AM Feature #7080: expose all admin APIs via REST

The wiki says '@/admin/tenant/login@. No header or body required.'. I don't see this in the code or testing it. @Basi... Galya B

06:13 AM Feature #7080: expose all admin APIs via REST

> Have you thought about authentication for the REST API?
In #6229 we have implemented the first set REST APIs for... Greg Shah

09/24/2024

09:58 AM Feature #6377 (WIP): provide tooling (and UI in the admin interface) to manage appserver agents (...

The attached spreadsheet is a sort of a wireframe for the admin console screen that will display some basic info for ... Galya B

03:26 AM Feature #7080: expose all admin APIs via REST

Have you thought about authentication for the REST API? Galya B

09/23/2024

08:55 AM Bug #9182: stop_disposition and a missing procedure results in 'No export or no access to'

Greg Shah wrote:
> I agree we should not get into an infinite loop in this case (missing startup procedure).
>
> ... Galya B

07:58 AM Bug #9182: stop_disposition and a missing procedure results in 'No export or no access to'

I agree we should not get into an infinite loop in this case (missing startup procedure).
We should detect it and ... Greg Shah

07:52 AM Bug #9182 (Review): stop_disposition and a missing procedure results in 'No export or no access to'

Fix committed to 4065g r15453. Galya B

07:51 AM Bug #9182 (WIP): stop_disposition and a missing procedure results in 'No export or no access to'

Galya B

07:49 AM Bug #9182: stop_disposition and a missing procedure results in 'No export or no access to'

Constantin, there probably needs to be a max attempt number for the recreate, because with a missing procedure the lo... Galya B

07:37 AM Bug #9182: stop_disposition and a missing procedure results in 'No export or no access to'

So, here's the story: There was a mechanism in @OSResourceManager@ (@initialize@) used by @ClientSideResourceManager@... Galya B

09/19/2024

03:55 AM Bug #9182: stop_disposition and a missing procedure results in 'No export or no access to'

SSO is not involved. Just start a server with stop_disposition=1 and try to runa ChUI client with a missimg program.
... Constantin Asofiei

02:45 AM Bug #9182: stop_disposition and a missing procedure results in 'No export or no access to'

Reported in #8964-88 with steps to recreate:
> * use @stop_disposition=1@ in @directory.xml@
> * run a FWD client w... Galya B

02:43 AM Bug #9182 (Test): stop_disposition and a missing procedure results in 'No export or no access to'

Galya B