Re: [Architecture] Revoking client secret on OAuth

2013-11-28 Thread Asela Pathberiya
On Fri, Nov 29, 2013 at 12:19 PM, Prabath Siriwardena wrote: > > On Fri, Nov 29, 2013 at 11:14 AM, Johann Nallathamby wrote: > >> Hi Asela, >> >> I think deleting the application and creating it again is fine. Its not a >> common case so its fine to re do the authorization. >> > > No.. its not acc

Re: [Architecture] Revoking client secret on OAuth

2013-11-28 Thread Prabath Siriwardena
On Fri, Nov 29, 2013 at 11:14 AM, Johann Nallathamby wrote: > Hi Asela, > > I think deleting the application and creating it again is fine. Its not a > common case so its fine to re do the authorization. > No.. its not acceptable to delete and redo. This will make all previously collected data/st

Re: [Architecture] Revoking client secret on OAuth

2013-11-28 Thread Johann Nallathamby
Hi Asela, I think deleting the application and creating it again is fine. Its not a common case so its fine to re do the authorization. On Fri, Nov 29, 2013 at 10:49 AM, Asela Pathberiya wrote: > Hi All, > > How can we revoke or update client credentials? If there is a trusted > client and wh

Re: [Architecture] Issuing JWT token for client_credential grant type

2013-11-28 Thread Asela Pathberiya
Hi Prabath/Johann, Thanks for reply. On Fri, Nov 29, 2013 at 10:40 AM, Prabath Siriwardena wrote: > If its the client credentials - the resource owner (end user) is the > client it self. > Yes.. then client would be the resource owner. Then authorized user would be the client. I guess, Server

[Architecture] Revoking client secret on OAuth

2013-11-28 Thread Asela Pathberiya
Hi All, How can we revoke or update client credentials? If there is a trusted client and when client's secret is compromised. Client would need to update this secret. (or generate new one and revoke older one). Sorry, I could not find any API method for this with IS 450. Or else, we need to de

Re: [Architecture] Issuing JWT token for client_credential grant type

2013-11-28 Thread Johann Nallathamby
Hi Asela, We can think of the client as the end user in this case and return client's attributes in the JWT. On Fri, Nov 29, 2013 at 10:16 AM, Asela Pathberiya wrote: > Hi All, > > Our current OAuth implementation issues JWT token when validating an OAuth > token that is granted by client cred

Re: [Architecture] Issuing JWT token for client_credential grant type

2013-11-28 Thread Prabath Siriwardena
If its the client credentials - the resource owner (end user) is the client it self. JWT is independent from OAuth - and its implementation in API - M is specific to WSO2. Thanks & regards, -Prabath On Fri, Nov 29, 2013 at 10:16 AM, Asela Pathberiya wrote: > Hi All, > > Our current OAuth impl

[Architecture] Issuing JWT token for client_credential grant type

2013-11-28 Thread Asela Pathberiya
Hi All, Our current OAuth implementation issues JWT token when validating an OAuth token that is granted by client credential grant type. This JWT token contains end user name and user's attributes. Please refer jira [1]. 1. How we are identifying the authorized user and claims in the JWT token w

Re: [Architecture] [Appfactory] Improving the scalability of the dasboards

2013-11-28 Thread Samisa Abeysinghe
Well, then there is a problem in the gadget design. Gadgets always need to take into account the time dimension. BAM always takes this time cubes into account in summarization. Thanks, Samisa... Samisa Abeysinghe Vice President Training WSO2 Inc. http://wso2.com On Fri, Nov 29, 2013 at 8:

Re: [Architecture] [Appfactory] Improving the scalability of the dasboards

2013-11-28 Thread Dimuthu Leelarathne
Hi Samisa, We have "Build Failures per App" gadget. So the question is, How many build failures in last week? How many build failures in last month? vs How many build failures since the beginning of the time? Current gadget answers the last question only. If we have a time limiter this will allo

Re: [Architecture] [Appfactory] Improving the scalability of the dasboards

2013-11-28 Thread Samisa Abeysinghe
I am not sure if I understand the problem here. But, if with time there is growth of data, and that affects dashboard, there is something wrong. Because, "summerization" got to proceed visualization, and that is why we use BAM here. So the problem never hits the dashboard. What am I missing? Than

Re: [Architecture] Code assistance script for Jaggery Editor

2013-11-28 Thread Rajeeva Uthayasangar
On Thu, Nov 28, 2013 at 5:07 PM, Dilshan Edirisuriya wrote: > > >> But Class concept is not available in Jaggery. Can i define the script as >> classes for object initialization: >> >> > Can we get the support for modules as well? Is there any way to access > functions in user defined modules? > >

Re: [Architecture] Code assistance script for Jaggery Editor

2013-11-28 Thread Dilshan Edirisuriya
> > But Class concept is not available in Jaggery. Can i define the script as > classes for object initialization: > > Can we get the support for modules as well? Is there any way to access functions in user defined modules? -- Dilshan Edirisuriya Senior Software Engineer - WSO2Mobile Mob: + 94

Re: [Architecture] Using Git submodules to manage Jaggery Apps of Enterprise Store

2013-11-28 Thread Chan
Peace~ --- Chan (Dulitha Wijewantha)  Software Engineer - Mobile Development WSO2Mobile  Lean.Enterprise.Mobileware   ~Email   duli...@wso2mobile.com   ~Mobile     +94712112165   ~Website   dulithawijewantha.com   ~Blog     blog.dulithawijewantha.com   ~Twitter     @dulitharw On November

Re: [Architecture] [Appfactory] Improving the scalability of the dasboards

2013-11-28 Thread Tanya Madurapperuma
Hi all, Once users start to use appfactory for sometime lot of data will be accumulated and users will not be interested in viewing all those in the dashboard. Instead they would prefer viewing a chosen set of data within a particular period of time. (Ex: Lets say user wants to view the number of

[Architecture] Updated Invitation: Discussion of MQTT to build a Push notification service @ Tue Dec 3, 2013 2:30pm - 3:30pm (duli...@wso2.com)

2013-11-28 Thread duli...@wso2.com
BEGIN:VCALENDAR PRODID:-//Google Inc//Google Calendar 70.9054//EN VERSION:2.0 CALSCALE:GREGORIAN METHOD:REQUEST BEGIN:VEVENT DTSTART:20131203T09Z DTEND:20131203T10Z DTSTAMP:20131128T081701Z ORGANIZER;CN=duli...@wso2.com:mailto:duli...@wso2.com UID:u0ci85mtukl5p2fs3t6icjq...@google.com ATTEN

Re: [Architecture] Carbon C5 - deployment of OSGi applications as first class citizens

2013-11-28 Thread chris snow
Hi Selvaratnam, Yes, that is partly what I was asking. See one of my previous posts on stackoverflow: http://stackoverflow.com/questions/17023754/wso2-should-i-implement-my-services-as-wso2-carbon-osgi-custom-components-or-b/17025952#17025952 The answer below suggests that OSGi isn't really sui