History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: AMATH-434
Type: New Feature New Feature
Status: Closed Closed
Resolution: Fixed
Priority: Major Major
Assignee: Stefan Winterstein
Reporter: Paul Libbrecht
Votes: 0
Watchers: 1
Operations

Link this issue to another issue
If you were logged in you would be able to see more operations.
ActiveMath

Authentication Tickets

Created: 2004-11-18 14:11   Updated: 2007-04-23 15:04
Component/s: Webapp: Framework, Base, General
Affects Version/s: None
Fix Version/s: 1.0

Time Tracking:
Not Specified

File Attachments: 1. File smime.p7s (2 kb)

Issue Links:
blocks
 
depends-on
 


 Description  « Hide
We need an ability to do the following which should be called "authentication-ticketing":
  • let, within the ActiveMath world, the authentication framework generate a secure ticket number given an authenticated user
  • this can be exchanged through many different channels, including through (trusted) third-parties
  • an http request should be able to be added with a ticketId=<ticketNumberDeliver> and would thus, automagically send a redirect with all needed cookies set thus transforming our http-request into an authenticated request
  • the ticket should then be consumed.

This is useful for an applet or jnlp-program on the client to make authenticated http requests (they don't have browser cookies) and in some other situations.



 All   Comments   Work Log   Change History   Version Control   FishEye   Crucible   Related Builds      Sort Order: Ascending order - Click to sort in descending order
Paul Libbrecht - 2004-11-18 14:11
We need it to expose the clipping requests in a slightly secure fashion.

Paul Libbrecht - 2004-11-18 14:11
In order to avoid that a learner sent to ActiveMath is requested a password, it would be nice that a server that intends to guide his learner's browser to one of our exercises be given tickets.

The issue here is that the learner might very well not be logged in yet.
At worst it might even not exist!

Still it makes sense to do so as the service in question is a trusted one for us.

paul


Stefan Winterstein - 2007-04-23 14:04
This is now actually implemented for Moodle, and soon for Clix.
Follow up to more specific issues.

Paul Libbrecht - 2007-04-23 15:04
can you please be more precise as to what is already implemented ?
I did not know it was.
paul