Hi everyone,

Basically my question is a very broad one about integrating Tapestry with 
remote authentication and authorization protocols, if this question is a little 
off topic I apologize in advance... I have an upcoming project to think about, 
and thought I should get some expert opinions before I start:

My project will involve a joint venture with a 3rd party to share some data and 
resources remotely over the web... my conundrum is how to secure these 
exchanges, which will need to be encrypted. I would like to know what security 
protocols / libraries people are using with Tapestry, which need not 
necessarily relate to my specific use case. 

Just FYI my set up as follows:
- Apache with SSL (mod_ajp) => Tomcat 6 
- Tapestry 5.1 Extranet Portal
- A relational database to store authentication information (this cannot change)
- A Single account for all portlets / web apps
- Mostly use forms based authentication
- Custom written authentication, authorization and session management (written 
mostly in Tapestry IoC)

Using Web Services is the most obvious to me at the moment, although I don't 
know much about the security protocols / libraries to use in conjunction and 
most important how to integrate them into our Tapestry based security API.  

Thanks in advance,
Peter


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org

Reply via email to