On 11/08/2010, at 12:26 AM, Mark H. Wood wrote:

> On Fri, Aug 06, 2010 at 09:59:44AM -0500, Tim Donohue wrote:
>> (1) We noticed that the REST API documentation on the wiki currently 
>> doesn't mention anything about Authentication.   How is authentication 
>> expected to be handled (or being handled)?  Is it just Basic HTTP Auth? 
>>  Is there any extra configuration/setup that should be documented on 
>> the wiki page?  It might be good to document how authentication is 
>> expected to be handled, and anything else worth knowing in this area.
> 
> This is of concern because DSpace provides a number of authentication
> mechanisms which aren't defined over HTTP.  It would thus not be
> possible to use the REST API with those types of credentials, and this
> might be a serious impediment to sites which make heavy use of those
> mechanisms.  If this feature does not now use DSpace's pluggable
> authentication infrastructure, I feel certain that we will want to
> rework it at some point so that it can.

This is possible, and is the way SWORD works. If the authN method uses a 
username and password, and is performed by DSpace, then you can use it with 
HTTP Basic. So for example the eperson username and password database, or LDAP 
work this way. Shibboleth does not work this way so wouldn't work.

See:

http://scm.dspace.org/trac/dspace/browser/dspace/trunk/dspace-sword/dspace-sword-api/src/main/java/org/dspace/sword/SWORDAuthenticator.java

and

http://scm.dspace.org/trac/dspace/browser/dspace/trunk/dspace-sword/dspace-sword-api/src/main/java/org/dspace/sword/DSpaceSWORDServer.java

Thanks,


Stuart Lewis
IT Innovations Analyst and Developer
Te Tumu Herenga The University of Auckland Library
Auckland Mail Centre, Private Bag 92019, Auckland 1142, New Zealand
Ph: +64 (0)9 373 7599 x81928


------------------------------------------------------------------------------
This SF.net email is sponsored by 

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev 
_______________________________________________
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to