search

docdoku / docdoku-plm

The project purpose is to develop a comprehensive, robust open source PLM (Product LifeCycle Management) solution.
http://www.docdokuplm.com
GNU Affero General Public License v3.0
243 stars 100 forks source link

[Authentication] JaaS #1092

Open florentgarin opened 7 years ago

florentgarin commented 7 years ago

before we implemented JWT token auth, it could be possible to configure the system to rely on JaaS module for authentication. We lost this flexibility since the credential validation rely on database stored login/password.

Why not delegate to a JaaS module?

mguimard commented 7 years ago

I didn't find a way to make a JaaS module work along with custom ServerAuthModule as they don't reside in the same application (payara libs / application source). Maybe I'm missing something like a setting to make them work together (thinking to "not required" setting), but that seems tricky to implement.

What we can do, is develop an other custom ServerAuthModule, which takes into account these params, and that could be enabled/disabled from domain settings.

An other great improvement, is to let the server admin choose which authentication modules are enabled/disabled.