Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [lyo-dev] OSLC client library

Hi Lyo-Dev!

Here are some quick feedback on the new Lyo Client from some friendly early adopters.

This looks really great and the client will be very useful!!

BR

Lars Ohlén / Cecilia Lindgren
Tieto
Sweden




1) - Warning in logs

Lots of warning log outputs with (seems to be Apache Wink related)
missing javax.servlet.http.HttpServletRequest

ignored org.eclipse.lyo.oslc4j.provider.jena.OslcRdfXmlProvider 
ignored org.eclipse.lyo.oslc4j.provider.json4j.OslcRdfJsonProvider



2) - Issue with Jazzbased Form Login procedure

If a user enters invalid credentials (e.g. non existing user and/or invalid password) the result is not as expected
https://bugs.eclipse.org/bugs/show_bug.cgi?id=389153


3) - Security context - improvement suggestions

Some comments of on security context handling

OslcClient.java::setupLazySSLSupport()


// Need to check for more than context than SSL. Add checks for TLS and (for IBM j9 JVMs) SSL_TLS
sc = SSLContext.getInstance("SSL"); //$NON-NLS-1$
                                                              

// /* Fail Silently */
Should throw some useful Exception



// avoid java deprication complier warnings
// replace
SSLSocketFactory sf = new SSLSocketFactory(sc);
sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
Scheme https = new Scheme("https", sf, 443);
// with
SSLSocketFactory sf = new SSLSocketFactory(sc,SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
Scheme https = new Scheme("https", 443 , sf);






-----Original Message-----
From: lyo-dev-bounces@xxxxxxxxxxx [mailto:lyo-dev-bounces@xxxxxxxxxxx] On Behalf Of Michael Fiedler
Sent: den 7 september 2012 13:45
To: Lyo project developer discussions
Subject: [lyo-dev] OSLC client library

We have an early version of an OSLC client library in Lyo now.  It can be found in the http://git.eclipse.org/gitroot/lyo/org.eclipse.lyo.client.git Git
repository.   Once the dependencies have cleared the Eclipse IP
process, it will be available as jars as well.   It includes:

- Apache Wink client to facilitate HTTP requests
- serialization/de-serialization of CM and QM artifacts to/from Java POJOs
- query and paging support
- OAuth client (samples coming soon)
- IBM Rational Jazz client extensions to the generic OSLC client for rootservices processing
- Samples

It does depend on the OSLC4J
(http://git.eclipse.org/gitroot/lyo/org.eclipse.lyo.core.git) and OAuth (http://git.eclipse.org/gitroot/lyo/org.eclipse.lyo.server.git)
projects in Lyo.

There is javadoc  now and we're working on some additional wiki documentations for it.

Regards,
Mike
_______________________________________________
lyo-dev mailing list
lyo-dev@xxxxxxxxxxx
http://dev.eclipse.org/mailman/listinfo/lyo-dev


Back to the top