Changes between Version 11 and Version 12 of proposals/ImprovedSecurityArchitecture

Timestamp:

Dec 15, 2010, 9:42:35 AM (14 years ago)

Author:

heikki

Comment:

--

proposals/ImprovedSecurityArchitecture

@@ -162 +162 @@
     * change lookups in GeoNetwork code to the above DBMS tables, to lookup the info in !SecurityTokenMap instead the login form and the non-GUI login ("xml login") delegate the act of logging in to GAAP
 
+=== GAAP application ===
+
+This section describes the GAAP application, both its Authentication Service and the administrative GUI interface.
+
+==== authentication service ====
+
+The Authentication Service is GAAP's raison d'être: to provide authentication functions to its client applications, while acting as a façade to hide details of the underlying security provider(s) from its client applications.
+
+Authentication requests from GAAP clients attempt to reach their destination, !AuthenticationService. This will succeed if the request is anonymous (no attempt at authentication is made) or if a succesful authentication happened in the Spring Security !FilterChain that intercepts requests to this service.
+
+
+[[Image(SpringSecurityAuthenticationServiceActivity.png)]]
+
 
 === Backwards Compatibility Issues ===