[OSLC] Root Services vs Service Provider Catalog

[Ferran Rodenas]

Hi,

Some questions about discovery services and security:

1) Are there any plans to create an OSLC specification similar to the JF
Root Services specification (
https://jazz.net/wiki/bin/view/Main/RootServicesSpec)? If not, which is the
standard mechanism to discover services offered by a tool? Clients MUST
point directly to the desired Service Provider Catalog (CM, QM, RM, ...)?

2) In this scenario, how consumers deal with security? The Service Provider
Catalog Specification 1.0 says that access to a service provider catalog
resource MAY be protected, and the CM Rest API 1.0 says that service
providers SHOULD support HTTP basic authentication and/or OAuth. But, how
consumers knows which authentication methods are supported by the service
provider? In the JF Root Services, at least, there are some Oauth
properties.

Thank you,

- Ferran
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://open-services.net/pipermail/community_open-services.net/attachments/20091224/e87f92b0/attachment-0003.html>