[QPID-6917] Make web SASL pluggable in web management UI

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: qpid-java-6.1
• Component/s: Broker-J
• Assignee: Keith Wall
• Reporter: Keith Wall
• Created: 27/Nov/15 16:54
• Updated: 17/Nov/16 13:04
• Resolved: 03/Feb/16 14:03

Description

Currently the web management hard codes the sasl mechanisms it knows about with an if/then/else ladder. We want to make the sasl mechanism pluggable. The client will know the sasl mechanisms that the server supports during the initial /sasl request. The client side should try to load the sasl implementation from a well known location URL. If the sasl client mechanism is found the implementation (which will meet an agreed interface - probably based on the Java Sasl Client design), will be used. If the sasl mechanism doesn't exist, the client should fall through to the next mechanism.

It will be possible to increase the SASL mechanisms supported by a WMC by dropping in a web fragment JAR containing another SASL js implementation.

We need to decide how the client will chose its preferred mechanism.