search

The-OAG-Development-Project / Application-Gateway

OWASP Application Gateway is an HTTP proxy that handles Oauth2 authentication and session management
https://owasp.org/www-project-application-gateway/
Apache License 2.0
83 stars 4 forks source link

Load Configuration File via HTTPS #25

Open gianlucafrei opened 3 years ago

gianlucafrei commented 3 years ago

Currently we Nelly only supports to load a config file from the local filesystem. We should add the option to load a configuration file via HTTPS.

-> Add a new class that implements NellyConfigLoader that load the file via https from remote -> Implement the HTTP loading if the file path begins with https:// -> Add error handling

nbaars commented 2 years ago

Maybe integrate with Spring Cloud Config server? (https://cloud.spring.io/spring-cloud-config/reference/html/)

gianlucafrei commented 2 years ago

@nbaars Seems like a good idea, however, only HTTPS is way simpler. Can Spring Cloud Config host our custom YAML file?

nbaars commented 2 years ago

Yes, by default it will use a Git repo it will checkout but you can also define a different backend, for example: Vault, file, JDBC etc etc, see: https://cloud.spring.io/spring-cloud-config/multi/multi__spring_cloud_config_server.html#_file_system_backend