[Yanel-dev] [Bug 7164] handle forgotten passwords

[Prabodh Upreti]

Let's discuss this further as I am a still little behind. thx.




________________________________
From: Michael Wechner <michael.wechner at wyona.com>
To: yanel-development at wyona.com
Sent: Friday, June 26, 2009 5:23:22 AM
Subject: Re: [Yanel-dev] [Bug 7164] handle forgotten passwords

Michael Wechner schrieb:
>>> How can I access a single repository so that
>>> multiple boxes can access the same data? I would like to have a central
>>> repository where I can store random generated id, email, expiration dat=
e/time
>>> to manage the forgot pw.
>> =

>> You could use the data repository of the realm your resource-type is run=
ning in, see org.wyona.yanel.core.Resource.getRealm().getRepository().
>> Or maybe as was said as the info really does not need to be persisted lo=
ng-term we could use the HTTP session if we can bear that session-replicati=
on would have to be activated in a clustered setup just for that.
>> =

>> WDYOT?
> =

> I think it should be persistent (even if we have session replication), wh=
ereas I would not use the default data repository, but rather the access co=
ntrol identities repository:
> =

> Resource.getRealm().getIdentityManager().getRepository()
> =

> but for a good reason the method getIdentityManager().getRepository() doe=
s not exist ;-)
> =

> because the IdentityManager API should not depend on Yarep.
> =

> Any suggestions ;-)
> =

> (I will also think some more about it)


btw org.wyona.security.core.api.PolicyManager.getPoliciesRepository()

exists, whereas I think this is bad. It seems to be used by

src/contributions/resources/yanel-user/src/java/org/wyona/yanel/impl/resour=
ces/YanelUserResource.java
src/core/java/org/wyona/yanel/core/Yanel.java

whereas in the case of Yanel.java it is part of=A0 a=A0 code block which is=
 commented.

We cannot remove, because it=A0 is a=A0 public method and probably third pa=
rties are using this method, but
I think we should deprecate it and introduce methods which make it independ=
ent of a Yarep repository.

Cheers

Michael

-- Yanel-development mailing list Yanel-development at wyona.com
http://lists.wyona.org/cgi-bin/mailman/listinfo/yanel-development



      =

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://wyona.com/pipermail/yanel-development/attachments/20090626/3b87=
2930/attachment.htm