Alon Bar-Lev has posted comments on this change.

Change subject: frontend: Pass JSESSIONID in VV file
......................................................................


Patch Set 9: Code-Review-1

one day the session id will be restricted to origin, and will not work from 
other sources, it is a mistake to relay on it and pass it to different 
applications.

application should support delegating authenticity to other consumers, 
enforcing management including enforcing logoff.

also having jsession (java) terms within interfaces is incorrect, the fact that 
it was introduced in restapi was a mistake, a mistake that should not be 
repeated.

in 3.6 we will have better management of authentication using sso service, and 
tokens so that features like this will be able to consume it.

marking as -1 as http sessions should not be shared.

-- 
To view, visit http://gerrit.ovirt.org/33770
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Id5c6d2c91b99240527760b57a6079b5f986aff5b
Gerrit-PatchSet: 9
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Martin Betak <[email protected]>
Gerrit-Reviewer: Alexander Wels <[email protected]>
Gerrit-Reviewer: Alon Bar-Lev <[email protected]>
Gerrit-Reviewer: Frank Kobzik <[email protected]>
Gerrit-Reviewer: Martin Betak <[email protected]>
Gerrit-Reviewer: Michal Skrivanek <[email protected]>
Gerrit-Reviewer: Tomas Jelinek <[email protected]>
Gerrit-Reviewer: Vojtech Szocs <[email protected]>
Gerrit-Reviewer: [email protected]
Gerrit-Reviewer: oVirt Jenkins CI Server
Gerrit-HasComments: No
_______________________________________________
Engine-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to