[higgins-dev] Higgins components for RCP security

[Manfred Duchrow <manfred.duchrow@xxxxxxxx>]

Hi all,

as you might know Jochen Hiller, Frank Gerhardt, Gunnar Wagenknecht and
and myself are currently working together with Mary Ruddy on an RCP
example application for the EclipseCon submission 656 "Identity
Management in Your RCP Application with Higgins".

Our approach is to have a simple RCP client app that opens a connection
to a server side component (i.e. a servlet executed in OSGi HTTP
service) to receive some XML data.
The server side (RP) requires a security token created and signed by
some IdP. If the token is not present it should return an authentication
challenge to the client, which of course should launch an Identity Selector.

So here we have some questions:
- What kind of challenge should be used here?
- Is there any Higgins component available that can produce such a
challenge response for the RP?
- Is there any Higgins component that can be used on the RCP client to
handle the challenge?

Thanks in advance!

Kind Regards,
  Manfred