proofpoint/platform — Issue #35: Better support for authn/authz in jersey-based apps
Author: markkent
Created: 2011-10-11 17:34:14+00:00
State: open

Imported from old tracking system. Originally raised P2 by mtraverso

Jersey doesn't provide any facilities for dealing with authentication & authorization. The current approach is based on jetty customizations and requires apps to explicitly manage authorization.

Wishlist:
- It needs to support basic auth and oauth
- What about cookie-based auth for ui web apps?
- Declarative for simple tasks, but flexible for more complex behavior
- Should support different auth sources (?) (static, ldap, etc)

We should look at how other frameworks deal with this:
- Rails
- Restlet