Author: lmccay Date: Fri Jan 29 19:34:46 2016 New Revision: 1727625 URL: http://svn.apache.org/viewvc?rev=1727625&view=rev Log: =updated pac4j to require clientName parameter
Modified: knox/site/books/knox-0-8-0/user-guide.html knox/site/index.html knox/site/issue-tracking.html knox/site/license.html knox/site/mail-lists.html knox/site/project-info.html knox/site/team-list.html knox/trunk/books/0.8.0/config_pac4j_provider.md Modified: knox/site/books/knox-0-8-0/user-guide.html URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/user-guide.html?rev=1727625&r1=1727624&r2=1727625&view=diff ============================================================================== --- knox/site/books/knox-0-8-0/user-guide.html (original) +++ knox/site/books/knox-0-8-0/user-guide.html Fri Jan 29 19:34:46 2016 @@ -2144,7 +2144,12 @@ APACHE_HOME/bin/apachectl -k stop <value>^https?:\/\/(localhost|127\.0\.0\.1|0:0:0:0:0:0:0:1|::1):[0-9].*$</value> </param> </service> -</code></pre><p>Notice that the pac4j callback url is the KnoxSSO url (<code>pac4j.callbackUrl</code> parameter). An additional <code>pac4j.cookie.domain.suffix</code> parameter allows you to define the domain suffix for the pac4j cookies.</p><p>In this example, the pac4j provider is configured to authenticate users via a CAS server hosted at: <a href="https://casserverpac4j.herokuapp.com/login">https://casserverpac4j.herokuapp.com/login</a>.</p><h5><a id="Parameters">Parameters</a> <a href="#Parameters"><img src="markbook-section-link.png"/></a></h5><p>You can define the identity provider or providers to be used for authentication with the appropriate parameters. When configuring more than one identity provider there is a mandatory parameter that must be defined to indicate the order in which the providers should be engaged with the first in the comma separated list being the default. Clients may indicate their desire to use one of the configured clients with a query parameter call ed client_name. When there is no client_name specified, the default (first) provider is selected.</p><p>For tests only, you can use a basic authentication where login equals password by defining the following configuration:</p> +</code></pre><p>Notice that the pac4j callback url is the KnoxSSO url (<code>pac4j.callbackUrl</code> parameter). An additional <code>pac4j.cookie.domain.suffix</code> parameter allows you to define the domain suffix for the pac4j cookies.</p><p>In this example, the pac4j provider is configured to authenticate users via a CAS server hosted at: <a href="https://casserverpac4j.herokuapp.com/login">https://casserverpac4j.herokuapp.com/login</a>.</p><h5><a id="Parameters">Parameters</a> <a href="#Parameters"><img src="markbook-section-link.png"/></a></h5><p>You can define the identity provider client/s to be used for authentication with the appropriate parameters - as defined below. When configuring any pac4j identity provider client there is a mandatory parameter that must be defined to indicate the order in which the providers should be engaged with the first in the comma separated list being the default. Consuming applications may indicate their desire to use one of the configured cl ients with a query parameter called client_name. When there is no client_name specified, the default (first) provider is selected.</p> +<pre><code><param> + <name>clientName</name> + <value>CLIENTNAME[,CLIENTNAME]</value> +</param> +</code></pre><p>Valid client names are: <code>FacebookClient</code>, <code>TwitterClient</code>, <code>CasClient</code>, <code>SAML2Client</code> or <code>OidcClient</code></p><p>For tests only, you can use a basic authentication where login equals password by defining the following configuration:</p> <pre><code><param> <name>clientName</name> <value>testBasicAuth</value> Modified: knox/site/index.html URL: http://svn.apache.org/viewvc/knox/site/index.html?rev=1727625&r1=1727624&r2=1727625&view=diff ============================================================================== --- knox/site/index.html (original) +++ knox/site/index.html Fri Jan 29 19:34:46 2016 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia at 2016-01-26 + | Generated by Apache Maven Doxia at 2016-01-29 | Rendered using Apache Maven Fluido Skin 1.3.0 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20160126" /> + <meta name="Date-Revision-yyyymmdd" content="20160129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – REST API Gateway for the Hadoop Ecosystem</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" /> @@ -58,7 +58,7 @@ - <li id="publishDate" class="pull-right">Last Published: 2016-01-26</li> + <li id="publishDate" class="pull-right">Last Published: 2016-01-29</li> </ul> </div> Modified: knox/site/issue-tracking.html URL: http://svn.apache.org/viewvc/knox/site/issue-tracking.html?rev=1727625&r1=1727624&r2=1727625&view=diff ============================================================================== --- knox/site/issue-tracking.html (original) +++ knox/site/issue-tracking.html Fri Jan 29 19:34:46 2016 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia at 2016-01-26 + | Generated by Apache Maven Doxia at 2016-01-29 | Rendered using Apache Maven Fluido Skin 1.3.0 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20160126" /> + <meta name="Date-Revision-yyyymmdd" content="20160129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Issue Tracking</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" /> @@ -58,7 +58,7 @@ - <li id="publishDate" class="pull-right">Last Published: 2016-01-26</li> + <li id="publishDate" class="pull-right">Last Published: 2016-01-29</li> </ul> </div> Modified: knox/site/license.html URL: http://svn.apache.org/viewvc/knox/site/license.html?rev=1727625&r1=1727624&r2=1727625&view=diff ============================================================================== --- knox/site/license.html (original) +++ knox/site/license.html Fri Jan 29 19:34:46 2016 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia at 2016-01-26 + | Generated by Apache Maven Doxia at 2016-01-29 | Rendered using Apache Maven Fluido Skin 1.3.0 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20160126" /> + <meta name="Date-Revision-yyyymmdd" content="20160129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Project License</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" /> @@ -58,7 +58,7 @@ - <li id="publishDate" class="pull-right">Last Published: 2016-01-26</li> + <li id="publishDate" class="pull-right">Last Published: 2016-01-29</li> </ul> </div> Modified: knox/site/mail-lists.html URL: http://svn.apache.org/viewvc/knox/site/mail-lists.html?rev=1727625&r1=1727624&r2=1727625&view=diff ============================================================================== --- knox/site/mail-lists.html (original) +++ knox/site/mail-lists.html Fri Jan 29 19:34:46 2016 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia at 2016-01-26 + | Generated by Apache Maven Doxia at 2016-01-29 | Rendered using Apache Maven Fluido Skin 1.3.0 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20160126" /> + <meta name="Date-Revision-yyyymmdd" content="20160129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Project Mailing Lists</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" /> @@ -58,7 +58,7 @@ - <li id="publishDate" class="pull-right">Last Published: 2016-01-26</li> + <li id="publishDate" class="pull-right">Last Published: 2016-01-29</li> </ul> </div> Modified: knox/site/project-info.html URL: http://svn.apache.org/viewvc/knox/site/project-info.html?rev=1727625&r1=1727624&r2=1727625&view=diff ============================================================================== --- knox/site/project-info.html (original) +++ knox/site/project-info.html Fri Jan 29 19:34:46 2016 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia at 2016-01-26 + | Generated by Apache Maven Doxia at 2016-01-29 | Rendered using Apache Maven Fluido Skin 1.3.0 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20160126" /> + <meta name="Date-Revision-yyyymmdd" content="20160129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Project Information</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" /> @@ -58,7 +58,7 @@ - <li id="publishDate" class="pull-right">Last Published: 2016-01-26</li> + <li id="publishDate" class="pull-right">Last Published: 2016-01-29</li> </ul> </div> Modified: knox/site/team-list.html URL: http://svn.apache.org/viewvc/knox/site/team-list.html?rev=1727625&r1=1727624&r2=1727625&view=diff ============================================================================== --- knox/site/team-list.html (original) +++ knox/site/team-list.html Fri Jan 29 19:34:46 2016 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia at 2016-01-26 + | Generated by Apache Maven Doxia at 2016-01-29 | Rendered using Apache Maven Fluido Skin 1.3.0 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20160126" /> + <meta name="Date-Revision-yyyymmdd" content="20160129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Team list</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" /> @@ -58,7 +58,7 @@ - <li id="publishDate" class="pull-right">Last Published: 2016-01-26</li> + <li id="publishDate" class="pull-right">Last Published: 2016-01-29</li> </ul> </div> Modified: knox/trunk/books/0.8.0/config_pac4j_provider.md URL: http://svn.apache.org/viewvc/knox/trunk/books/0.8.0/config_pac4j_provider.md?rev=1727625&r1=1727624&r2=1727625&view=diff ============================================================================== --- knox/trunk/books/0.8.0/config_pac4j_provider.md (original) +++ knox/trunk/books/0.8.0/config_pac4j_provider.md Fri Jan 29 19:34:46 2016 @@ -111,8 +111,15 @@ In this example, the pac4j provider is c ##### Parameters ##### -You can define the identity provider or providers to be used for authentication with the appropriate parameters. -When configuring more than one identity provider there is a mandatory parameter that must be defined to indicate the order in which the providers should be engaged with the first in the comma separated list being the default. Clients may indicate their desire to use one of the configured clients with a query parameter called client_name. When there is no client_name specified, the default (first) provider is selected. +You can define the identity provider client/s to be used for authentication with the appropriate parameters - as defined below. +When configuring any pac4j identity provider client there is a mandatory parameter that must be defined to indicate the order in which the providers should be engaged with the first in the comma separated list being the default. Consuming applications may indicate their desire to use one of the configured clients with a query parameter called client_name. When there is no client_name specified, the default (first) provider is selected. + + <param> + <name>clientName</name> + <value>CLIENTNAME[,CLIENTNAME]</value> + </param> + +Valid client names are: `FacebookClient`, `TwitterClient`, `CasClient`, `SAML2Client` or `OidcClient` For tests only, you can use a basic authentication where login equals password by defining the following configuration: