#218: BibMatch: matching restricted collections
--------------------------+-------------------------------------------------
Reporter: jlavik | Owner: jlavik
Type: enhancement | Status: new
Priority: major | Milestone:
Component: BibMatch | Version:
Resolution: | Keywords:
--------------------------+-------------------------------------------------
Comment (by skaplun):
Replying to [ticket:218 jlavik]:
> However, matching in restricted collections will not work for queries
against remote Invenio installations, as using websearch requires proper
authentication. So until this issue have been resolved, the restricted
collection matching would for now be a feature only available locally.
Passing non-restricted collections to remote servers, however, will work.
To have a robot (in this case InvenioConnector) to be able to login on an
Invenio installation on behalf of a user, is something that is also needed
by OpenAIRE project, as at the beginning the Portal will log in into the
Orphan repository (which is an Invenio installation) on behalf of the
user, to avoid user to login twice.
For this we came out with the idea of the remote Invenio instance to trust
properly encrypted robot requests with shared on public/private keys. With
an additional robot oriented API, the robot would login a user by
encrypting the request with his private key. The remote Invenio would be
able to verify it and trust the robot. In principle, the password of the
user might be as well sent to the remote handler for not only trusting the
robot, but also verifying user credentials.
--
Ticket URL: <http://invenio-software.org/ticket/218#comment:1>
Invenio <http://invenio-software.org>
