[oslc-core] Authentication details in service documents

[Ian Green1]

Hi Jim,

The DOORS RP OSLC RM implementation does not provide these properties.  A 
provider could offer a top-level catalogue which did not require 
authentication, but which does not contain security-protected information. 
 This catalog would have an ouathProvider property and a 
serviceProviderCatalog but no serviceProvider.  My interpretation of the 
core spec. is that those oauth urls would be used to gain access to the 
cited serviceProviderCatalog.  This nested catalog would not necessarily 
contain oauth urls (but it could).

The IBM Rational Jazz-based providers that I've seen consider the catalog 
to be protected, and the oauth urls come from elsewhere, not defined by 
OSLC.

Should the expectation around oauthProvider be clarified, perhaps?

best wishes,
    -ian

ian.green at uk.ibm.com (Ian Green1/UK/IBM at IBMGB)
Chief Software Architect, Requirements Definition and Management
IBM Rational

oslc-core-bounces at open-services.net wrote on 26/08/2010 14:37:17:

> [image removed] 
> 
> [oslc-core] Authentication details in service documents
> 
> James Conallen 
> 
> to:
> 
> oslc-core
> 
> 26/08/2010 14:48
> 
> Sent by:
> 
> oslc-core-bounces at open-services.net
> 
> As I look at the service documents there are properties for 
> establishing OAuth in the same document that lists contexts (service
> providers). I am assuming that documents possessing authentication 
> establishment information are expected to be available without 
> authentication. This means that context information will be 
> available without authentication, which I don't think is right.
> 
> What is everyone else's understanding?
> 
> <jim/>
> 
> jim conallen
> jconallen at us.ibm.com
> Rational Software, IBM Software Group
> _______________________________________________
> Oslc-Core mailing list
> Oslc-Core at open-services.net
> http://open-services.net/mailman/listinfo/oslc-core_open-services.net






Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number 
741598. 
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU