Changes

Jump to navigation Jump to search
140 bytes added ,  10:16, 9 March 2023
m
Text replacement - "<br />" to "<br/>"
This page will summarize first thoughts on annotation-based security/authentication support in BaseX.
Annotation specification (first thoughts):
(: The basic security annotation enforcing a authorization on method invocation.:)(: The literal defines a principal which must be assigned to Responsible for performing the current logged in login of an user , see sec:)(authenticate and sec: If login functions in the authorization was not successfull the default authorization fallback is called. @see %sec:authorization-fallback() security module :)<br/>'''%sec:requires-principalauthenticate(string)''' <br/>
(: The basic security annotation enforcing a authorization on method invocation.:)<br/>(: The first literal defines a principal which must be assigned to the current logged in user :)<br/>(: The second defines the fallback function which should be called if If the authorization was not successful successfull the default authorization fallback is called. @see %sec:authorization-fallback(string) :)<br/>'''%sec:requires-principal(string,string)''' <br/>
(: The default basic security annotation enforcing a authorization fallback functionon method invocation. :) <br/>(: The function first literal defines a principal which must not have any arguments be assigned to the current logged in user :)<br/>(: relevant information like The second defines the current username might fallback function which should be available through additional xquery function in called if the security module authorization was not successful @see %sec:authorization-fallback(string) :)<br/>'''%sec:authorizationrequires-fallbackprincipal(string,string)''' <br/>
(: An Enforces an authentication but no authorization fallback function addressable for %sec:requires-principal(string,string) by given id. The function must not have any arguments :)(: relevant information like the current username might be available through additional xquery function in the security module :)<br/>'''%sec:authorizationrequires-fallbacklogin(string)''' <br/>
(: The default authentication authorization fallback function. The function must not have any arguments :)<br/>(: relevant information like the current username might be available through additional xquery function in the security module :)<br/>'''%sec:authenticationauthorization-fallback()''' <br/>
(: Provides An authorization fallback function addressable for %sec:requires-principal(string,string) by given id. The function must not have any arguments :) <br/>(: relevant information like the current username might be available through additional xquery function in the security module :) <br/>'''%sec:authorization-fallback(string)''' <br/> (: The default credentials if the authentication was fallback function. The function must not successful have any arguments :)<br/>'''%sec:credentialsauthentication-fallback()''' <br/>
Bureaucrats, editor, reviewer, Administrators
13,554

edits

Navigation menu