cklein05 commented on pull request #428:
URL: https://github.com/apache/tomcat/pull/428#issuecomment-865024538


   > The only thing that I'm really wondering about is why the 
UserDatabaseRealm did not get arbitrary attributes.
   
   My first focus was on UserDatabaseRealm and JDNIRealm. Arbitrary user 
attributes for UserDatabaseRealm sounds interesting. However, I did not yet 
think about it in detail. AFAIK, there is a schema file for tomcat-users.xml. 
Some new Digester rules must be defined. Actually, the attributes come from the 
`User` instance. Likely this class should get an attributes map as well (which 
we then can provide through `UserDatabasePrincipal`).
   
   I'm almost finished with all the changes caused by that code review. Also, 
I've added support for SQL types ARRAY, BLOB, and CLOB. I will push my latest 
commits soon.
   
   Still open/pending:
   
   - Using *linked* hash maps (yes/no)
   - Defensive copies (how paranoid shall we go?)
   - Documentation (likely my job)
   
   The latter might be quite challenging. Needs additions in 
`config/realm.html` and likely in `realm-howto.html`. Since, at current, only 
`TomcatPrincipal` supports the attribute stuff, maybe a code example in one of 
the HTML sites will be required.
   
   Has anyone thought about putting these methods to a more _official_ 
interface `jakarta.servlet.Principal`? Since it is now _jakarta_, is Apache or 
Tomcat now responsible for the Servlet Standard?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to