Re: [Architecture] [Progress] Dynamically Detection Of Broker Nodes In Cluster And Load Balancing

2016-10-19 Thread Asanka Abeyweera
Hi Sidath, What was the reason to use *PascalCase* for attribute names? In HTML for attributes we normally use all lower case with hyphens [1]. Maybe we should adhere to the same style. WDYT? Do we currently have any character restrictions on the Node id? Are we escaping the reserved characters i

[Architecture] [IS] What are the REST APIs in WSO2IS-5.3.0 that need to be secured?

2016-10-19 Thread Ayesha Dissanayaka
Hi all, I have started testing the"Generic Authentication Mechanism to all the REST APIs" feature [1] in IS-5.3.0. Please mention details on REST APIs in IS services which needs to be secured, so that I can test those APIs with this feature. [1] https://wso2.org/jira/browse/IDENTITY-4742 Thanks!

Re: [Architecture] [Progress] Dynamically Detection Of Broker Nodes In Cluster And Load Balancing

2016-10-19 Thread Sidath Weerasinghe
Hi all, Andes client invokes the admin service to get IP address and ports of the live nodes in the cluster. Admin service makes XML structure and sends that string to the client who invokes the service. Previous XML structure is changed. Here is the new structure of the XML, *http

Re: [Architecture] Exporting a API without Mediation Policies.

2016-10-19 Thread Thilini Cooray
On Thu, Oct 20, 2016 at 10:38 AM, Malintha Amarasinghe wrote: > > > On Thu, Oct 20, 2016 at 10:31 AM, Thilini Cooray > wrote: > >> Yes, it needs to be aborted. >> Since API definition contains these mediation details, AFAIU this API >> would not even get published to the gateway without those. >

Re: [Architecture] Exporting a API without Mediation Policies.

2016-10-19 Thread Malintha Amarasinghe
On Thu, Oct 20, 2016 at 10:31 AM, Thilini Cooray wrote: > Yes, it needs to be aborted. > Since API definition contains these mediation details, AFAIU this API > would not even get published to the gateway without those. > Yeah, but Publishing an API is a different stage right? The imported API wi

Re: [Architecture] Exporting a API without Mediation Policies.

2016-10-19 Thread Thilini Cooray
Yes, it needs to be aborted. Since API definition contains these mediation details, AFAIU this API would not even get published to the gateway without those. Thanks. On Thu, Oct 20, 2016 at 10:24 AM, Nuwan Dias wrote: > > > On Thu, Oct 20, 2016 at 9:37 AM, Kaveesha Perera > wrote: > >> Hi all,

Re: [Architecture] Exporting a API without Mediation Policies.

2016-10-19 Thread Nuwan Dias
On Thu, Oct 20, 2016 at 9:37 AM, Kaveesha Perera wrote: > Hi all, > > Currently I'm working on a client side tool to perform import and export > of APIs in APIM. > > On proceeding with importing a exported API, I came across a doubt state, > Should we abort the normal process of API import if we

Re: [Architecture] OpenID Connect Based SSO valve for WSO2 AS 6.0.0

2016-10-19 Thread Abilashini Thiyagarajah
Hi all, I would like to clarify the features that has been included in the implementation of OpenID Connect Based SSO for AS. - There is an agent API class called ‘OIDCAgent’. The requirement of the Agent API is to have well defined methods to achieve OIDC Concepts which can be used by

Re: [Architecture] Kernel changes/improvements needed for IS release

2016-10-19 Thread Jayanga Dissanayake
Hi Niranjan, You are correct, by the time a feature is developed, it is not defined, to which profiles this feature goes into. And the profiles are defined at the product level. (as per the C4) Above (directory structure) is the proposed structure for the new distributions. We have not yet finali

[Architecture] Exporting a API without Mediation Policies.

2016-10-19 Thread Kaveesha Perera
Hi all, Currently I'm working on a client side tool to perform import and export of APIs in APIM. On proceeding with importing a exported API, I came across a doubt state, Should we abort the normal process of API import if we failed to upload the corresponding mediation policies of that API, or

Re: [Architecture] [IS] Authorization for Service Providers

2016-10-19 Thread Prabath Siriwardana
Overall I think we need not to worry at this stage what happens from one step to another. Authorization will happen at the end of the authentication flow (as Pulasthi explained)... and SP should not be aware of what steps got executed in the authentication flow - it will simply define access contro

Re: [Architecture] Grouping Identity server configurations.

2016-10-19 Thread Prabath Siriwardana
Sorry for the late response... If we are trying to create an isolated environment here - can't we do the same by having a container per security circle - so we do not have to do anything at the code level (basically, we treat the security circle as a tenant) Are there anything shared between the

Re: [Architecture] [PET][Dynamic Schema]Dynamic Schema Generation Plan for Salesforce SOAP Connector

2016-10-19 Thread Hariprasath Thanarajah
Hi All, I have finished most of the dynamic schema creation part for salesforce soap connector dynamic operations and I need to omit some methods I proposed earlier because it has the static schema. On Fri, Oct 7, 2016 at 10:15 AM, Hariprasath Thanarajah < haripras...@wso2.com> wrote: > Hi All,

Re: [Architecture] [Progress] JS based Data Mapper tooling

2016-10-19 Thread Sachithra Dangalla
Hi, The project progress is as follows. - The application reads JSON schemas and draw the file content in a tree structure in Input/Output. - Operator containers can be drawn for given input/output counts. - Each container(Input, Output and Operators) are draggable. - Each containe

Re: [Architecture] Kernel changes/improvements needed for IS release

2016-10-19 Thread Niranjan Karunanandham
Hi Jayanga, On Wed, Oct 19, 2016 at 3:42 PM, Jayanga Dissanayake wrote: > Yesterday we had a meeting to discuss about the IS distribution and > followings are the changes/improvements that are needed to be provided by > the kernel. > >- Server “conf” and “deployment” directory locations shou

[Architecture] Kernel changes/improvements needed for IS release

2016-10-19 Thread Jayanga Dissanayake
Yesterday we had a meeting to discuss about the IS distribution and followings are the changes/improvements that are needed to be provided by the kernel. - Server “conf” and “deployment” directory locations should be configurable - Refer [1] potential directory structure for IS. It will h

Re: [Architecture] [IS] Authorization for Service Providers

2016-10-19 Thread Pulasthi Mahawithana
Hi All, > Do we execute the authorization handler for each request...? even the user > is authenticated...? > Yes we do, that way we'll ensure that different policies will be evaluated per service provider even in the same IdP session. We also don't maintain an 'authorized' state for the user be

Re: [Architecture] [IS] Authorization for Service Providers

2016-10-19 Thread Asela Pathberiya
On Wed, Oct 19, 2016 at 12:57 PM, Ishara Karunarathna wrote: > Hi Farasath, > > On Wed, Oct 19, 2016 at 12:39 PM, Farasath Ahamed > wrote: > >> We also need to consider how we are going to handle the 'NotApplicable' >> and 'Indeterminate' responses by the XACML engine. Especially the >> Indeterm

Re: [Architecture] [IS] Authorization for Service Providers

2016-10-19 Thread Ishara Karunarathna
Hi Farasath, On Wed, Oct 19, 2016 at 12:39 PM, Farasath Ahamed wrote: > We also need to consider how we are going to handle the 'NotApplicable' > and 'Indeterminate' responses by the XACML engine. Especially the > Indeterminate response that might be due to some missing attributes etc. > > AFAIK

Re: [Architecture] [IS] Authorization for Service Providers

2016-10-19 Thread Farasath Ahamed
We also need to consider how we are going to handle the 'NotApplicable' and 'Indeterminate' responses by the XACML engine. Especially the Indeterminate response that might be due to some missing attributes etc. AFAIK the decisions of multiple evaluated policies are currently evaluated based on the