[PATCH] 86 Moved REST services into separate URLs.
To support different access control configurations the REST services have been moved out of /pki into several URLs. The certificate request submission service is now located under /ee and it does not require authentication. The configuration service is located under /installer and it requires service-level authentication using PIN. The remaining services are located under /agent and /admin. They require realm authentication using client cert or basic authentication and also require administrator or agent access rights. Existing servlets are not affected by this change. Ticket #107, #259 -- Endi S. Dewata
On 7/26/2012 10:36 PM, Endi Sukma Dewata wrote:
To support different access control configurations the REST services have been moved out of /pki into several URLs.
The certificate request submission service is now located under /ee and it does not require authentication. The configuration service is located under /installer and it requires service-level authentication using PIN. The remaining services are located under /agent and /admin. They require realm authentication using client cert or basic authentication and also require administrator or agent access rights. Existing servlets are not affected by this change.
Ticket #107, #259
New patch attached. The search/list operations for certificate and certificate request are now accessible without authentication under /ee. -- Endi S. Dewata
On 7/31/2012 8:18 AM, Endi Sukma Dewata wrote:
On 7/26/2012 10:36 PM, Endi Sukma Dewata wrote:
To support different access control configurations the REST services have been moved out of /pki into several URLs.
The certificate request submission service is now located under /ee and it does not require authentication. The configuration service is located under /installer and it requires service-level authentication using PIN. The remaining services are located under /agent and /admin. They require realm authentication using client cert or basic authentication and also require administrator or agent access rights. Existing servlets are not affected by this change.
Ticket #107, #259
New patch attached. The search/list operations for certificate and certificate request are now accessible without authentication under /ee.
New patch attached. The /ee and /admin methods have been moved back into the original class, but each method now will use absolute @Path. Please apply in this order: 86-2, 89. -- Endi S. Dewata
New patch attached. The services are now split based on roles into /rest, /rest/admin, and /rest/agent. Please apply in this order: 86-3, 89-1. -- Endi S. Dewata
participants (1)
-
Endi Sukma Dewata