[ACE-460] Provide a way to automate client access to an ACE server using a script

• Type: New Feature
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.0.1
• Component/s: Client Repository
• Assignee: Marcel Offermans
• Reporter: Herko ter Horst
• Created: 24/Feb/14 15:52
• Updated: 22/Jan/15 16:16
• Resolved: 17/Apr/14 08:56

Description

In our use case (automatic deployment of bundles and ACE configuration settings from Bndtools), we would benefit from a way to automate client access to an ACE server using a (Gogo) script.

The attached patch provides a GogoServlet, intended to be used as part of an ACE client, that accepts Gogo scripts as input (in a "script" parameter) an executes them.

Note that while the commands in the script are subject to normal ACE server authentication when they are executed, the ScriptServlet itself is NOT secured in any way as of yet. Client security will need to be addressed more broadly, as the RESTServlet has the same problem. While there does not seem to be an immediate risk to ACE servers and targets, it leaves longer running ACE clients vulnerable.

Issue Links

• breaks: ACE-511 ScriptServlet does not apply security