Securityfilter Improvements

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============0057234684==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="------------enig0222C7787387AFBFE88EAADF"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig0222C7787387AFBFE88EAADF
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

All,

I have some ideas for improvement for securityfilter and I'd like some
feedback on which ones are worthwhile. Additional ideas would be good, to=
o.

General cleanup and updates:

* Implement user-data-constraint (really transport-guarantee)
* Support servlet spec 2.4 (only a few changes, but one biggie
  is that overlapping security-constraints must be handled in
  specific ways)
* Support servlet spec 2.5 (haven't looked yet; let's get 2.4 done
  first)

New features:
* Implement optional per-login "tie login to this IP" capability

Future Ideas:
* Eliminate use of jakarta-oro ; regexps are overkill for url-pattern
matching, and oro is nearly dead (right?)
* Move principal management into PrincipalStorageManager or something
  - this would allow us to keep Principal objects outside of the session
  attributes if we (or our users) want to
* Re-architect the filter to be mode modular - I've been looking at
Struts 1's RequestProcessor (as per the "better extensibility" bug
filed) and Struts 2's "interceptor" stack as two different possible
models for modularization
* Add support for DIGEST authentication (requires change to Realm interfa=
ce)
* Add support for CLIENT-CERT authentication

Thanks,
-chris



--------------enig0222C7787387AFBFE88EAADF
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHL08H9CaO5/Lv0PARAhDcAJ4kdiB05tynX8Xacsz/kkH3QdiTxgCgwzM5
xRj+0Ur6OyFi5mS9t+zxBjA=
=pqiL
-----END PGP SIGNATURE-----

--------------enig0222C7787387AFBFE88EAADF--


--===============0057234684==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
--===============0057234684==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
securityfilter-devel mailing list
securityfilter-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/securityfilter-devel

--===============0057234684==--