[Fiware-wpa] Fwd: Short term solution to provide controlled access to FI-WARE GE APIs on the FI-WARE Testbed

[Juanjo Hierro]

  FYI,

-- Juanjo

-------- Original Message --------
Subject:        Short term solution to provide controlled access to FI-WARE GE APIs on the FI-WARE Testbed
Date:   Tue, 30 Oct 2012 07:19:04 +0100
From:   Juanjo Hierro <jhierro at tid.es><mailto:jhierro at tid.es>
To:     ab at fi-ppp.eu<mailto:ab at fi-ppp.eu> <ab at fi-ppp.eu><mailto:ab at fi-ppp.eu>
CC:     José Ignacio Carretero <e.cloud10 at tid.es><mailto:e.cloud10 at tid.es>, HENAR MUÑOZ FRUTOS <henar at tid.es><mailto:henar at tid.es>, Miguel Carrillo <mcp at tid.es><mailto:mcp at tid.es>, "jhierro >> \"Juan J. Hierro\"" <jhierro at tid.es><mailto:jhierro at tid.es>


Dear colleagues,

  As promised, the short-term solution to provide controlled access to FI-WARE GEs deployed on the FI-WARE Testbed is already implemented and available.

  We have written a short guide with instructions about how to administer user accounts for your project and how developers should program their applications to gain access to the FI-WARE Testbed.  You can download this guide from the following URL:

https://forge.fi-ware.eu/docman/view.php/7/1511/IdM+and+Access+Control+Short+Term+Solution+Guide.docx

  Please note that, as a very first step, we need to create a number of user accounts with admin privileges associated to each of the UC projects.   Admin users will be able to create additional user accounts for their UC projects.    We need that you send an email to e.cloud10 at tid.es<mailto:e.cloud10 at tid.es> with the login of your required admin user account so that we can assign it a password and send it back to you (we will support a more sophisticated self-service process as part of the medium term solution to be made available by end of November but hopefully you can live with this approach for the time being).   You may indicate what password you would like to be assigned in your email.

  Once you have been assigned a user account with admin privileges, you will be able to login to the FI-WARE Testbed Login Web Portal and create new accounts for users linked to your UC project.   The steps are explained in the short guide.   Developers will be able to use a JavaScript code to gain access from a given application.   This is also explained in the short guide.

  We are now working on the medium-term solution described in the presentation we already sent to you (see attached email).   It should be ready by end of November.

  Best regards,

-- Juanjo


-------------
Product Development and Innovation (PDI) - Telefonica Digital
website: www.tid.es<http://www.tid.es>
email: jhierro at tid.es<mailto:jhierro at tid.es>
twitter: twitter.com/JuanjoHierro

FI-WARE (European Future Internet Core Platform) Chief Architect

You can follow FI-WARE at:
  website:  http://www.fi-ware.eu
  facebook: http://www.facebook.com/pages/FI-WARE/251366491587242
  twitter:  http://twitter.com/FIware
  linkedIn: http://www.linkedin.com/groups/FIWARE-4239932



-------- Original Message --------
Subject:        Short/Medium terms solution to provide controlled access to FI-WARE GE APIs on the FI-WARE Testbed
Date:   Mon, 22 Oct 2012 07:42:11 +0200
From:   Juanjo Hierro <jhierro at tid.es><mailto:jhierro at tid.es>
To:     ab at fi-ppp.eu<mailto:ab at fi-ppp.eu> <ab at fi-ppp.eu><mailto:ab at fi-ppp.eu>


Dear colleagues,

  During our last FI-PPP AB virtual meeting, I had the opportunity to share with you the design of the short and medium term solutions we have devised to deal with Access Control to APIs of FI-WARE GEs deployed on the FI-WARE Testbed.

  I would like you to update the slides that summarize these solutions by means of downloading the presentation available from:
https://forge.fi-ware.eu/docman/view.php/7/1398/FI-WARE+Testbed+temporary+Identity+and+Access+Control+solution.pptx

  There, I have simply fixed some typos on some of the slides and provided some additional information/descriptions.   I have also adapted the slides to the official template ;-)

  During my presentation at the FI-PPP AB virtual meeting, I mentioned that we will try to get the medium-term solution ready by end of November (this means providing support to an OAuth 2.0-based controlled access to FI-WARE GE APIs).    It was an AP on me to provide a target date for the short term solution we have already started to implement.   Then, let me inform you that we expect this to be before end of October, probably even end of this week.    We will keep you informed.

  Note that in the short term solution will require that the UC applications running on browsers (e.g., browsers running on smartphones) and intending to invoke FI-WARE GE APIs, use a javascript library that will be provided by FI-WARE which will allow to login and re-login whenever access is denied because the IP assigned to the user device has changed.   In the medium short term solution, a standard OAuth 2.0 mechanism will be in place.

  In any case, we will also consider the ability to configure temporary unrestricted access to FI-WARE GEs on the Testbed, in order to deal with critical short-term demos.    This is probably the safest solution for the PoC demo of Safecity during November, for example.

  Cheers,


-- Juanjo

-------------
Product Development and Innovation (PDI) - Telefonica Digital
website: www.tid.es<http://www.tid.es>
email: jhierro at tid.es<mailto:jhierro at tid.es>
twitter: twitter.com/JuanjoHierro

FI-WARE (European Future Internet Core Platform) Chief Architect

You can follow FI-WARE at:
  website:  http://www.fi-ware.eu
  facebook: http://www.facebook.com/pages/FI-WARE/251366491587242
  twitter:  http://twitter.com/FIware
  linkedIn: http://www.linkedin.com/groups/FIWARE-4239932








________________________________

Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at:
http://www.tid.es/ES/PAGINAS/disclaimer.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-wpa/attachments/20121030/d11c7247/attachment.html>