Re: [virgo-dev] Security in Virgo

[Ric Klaren <rklaren@xxxxxxxxxxx>]

Hi,

On 25 November 2010 10:31, Glyn Normington <gnormington@xxxxxxxxxx> wrote:
> You can get STS working with the Virgo kernel simply by editing the file that STS complains about when you try to point it at a Virgo kernel rather than a Virgo web server. The error pop up tells you what the file needs to contain, although I forget the details. (I can reproduce the precise steps if this isn't straightforward for you.)

Thanks for the work-around :)

> Looking at bug 330897, the simple solution is to run a HTTP Service on the kernel, but your requirement is a little different with some integration with WABs required. Please could you change the title of the bug and add comments as necessary to make your requirement clearer for people reading the bug for the first time.

Well the integration with WAB isn't a direct requirement only an
assumption I made, but thinking some more on it it's not that simple
since the OSGi service should then be linked to a specific WAB in some
way?

We can also perfectly live with a separate HTTP Service, it's only a
matter of choosing one and some refactoring. Maybe some more chances
to move configuration from dumb xml files inside jars to real
configuration files.

From a Virgo perspective the feature request could be changed to:
* Provide a OSGi HTTP Service per WAB so a lightweight method of
dynamically inserting Servlets becomes possible
* Provide a OSGi HTTP Service (which co-exists with tomcat on a separate port)
* Close the ticket and point to snaps ?

Cheers,

Ric