Colm O hEigeartaigh created CXF-4657:
----------------------------------------
Summary: Add XACML functionality to CXF runtime
Key: CXF-4657
URL: https://issues.apache.org/jira/browse/CXF-4657
Project: CXF
Issue Type: Improvement
Components: JAX-RS Security, WS-* Components
Affects Versions: 2.7.0
Reporter: Colm O hEigeartaigh
Assignee: Colm O hEigeartaigh
Fix For: 2.7.1
This task is to add XACML functionality to the CXF runtime, to enable a CXF
JAX-WS or JAX-RS endpoint to act as a PEP (Policy Enforcement Point). A SAML
Token is extracted from the SecurityContext, and an XACML request is created
containing the User/Role/Action/etc. The user must subclass this abstract
functionality to actually perform the request to the PDP. The response from the
PDP is then enforced in the PEP.
This functionality will be added in a new rt/security module, where we can
eventually move more of the common JAX-RS/JAX-WS security functionality from
the rt/core module.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
