search

wso2 / product-is

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
http://wso2.github.io/
Apache License 2.0
748 stars 729 forks source link

Make carbon mgt console & soap services disabled by default #20755

Open darshanasbg opened 4 months ago

darshanasbg commented 4 months ago

Is your suggestion related to an experience ? Please describe. Carbon Management Console has been deprecated with IS 7.0.0 https://is.docs.wso2.com/en/latest/references/about-this-release/#deprecated-features

SOAP Services has been deprecated since IS 6.0.0 https://is.docs.wso2.com/en/6.1.0/references/about-this-release/#deprecated-features

As the first step retiring these functionality, its better to disable these two in the default pack.

Describe the improvement Have soap services and the carbon management console not accessible in the default pack.

Need to consider giving a feature flag to enable soap services to keep the backward compatibility for anyone who is migrating from an old version.

Additional context Fully retiring these features would possibly be done with next major IS version.

janakamarasena commented 4 months ago

Would be good if soap services can be selectively enabled so anyone can enable only the ones they require.

darshanasbg commented 4 months ago

Would be good if soap services can be selectively enabled so anyone can enable only the ones they require.

Yeah.. We can consider that..

shashimalcse commented 4 months ago

Identified a couple of SOAP services used in IS7 management console features related to API access management and authroization. Giving a feature flag to enable these features would be ideal.

The following are some SOAP services not used in the console (We can disable these for the default pack):

darshanasbg commented 4 months ago

Thanks for the analysis @shashimalcse..

IMO, we should not ask to access management console or soap services for any features that are not deprecated in the product.. We should have corresponding REST APIs and new UIs to use them..

We may allow selective access to soap services, considering the backward compatibility of the legacy deprecated features.. But that should be only used for that purpose..

shashimalcse commented 4 months ago

@darshanasbg agree! there is an effort ongoing with XACML REST APIs and the new console UI. Let's track those.