BaseX-Talk Digest, Vol 137, Issue 3

Monday, 3 May 2021 · 2 messages
AL
Adam Law3 May 2021 14:07 #
Thanks Marco, I understand. As an aside for others, a GO edge router with BaseX is another option - say https://github.com/thomseddon/traefik-forward-auth. OIDC, ACME and SSL are all built in. BaseX can trust / check the forwarded cookie as part of BaseX permissions checking. https://docs.basex.org/wiki/Permissions Adam
Quoted text · PM · 226 lines
On Mon, May 3, 2021 at 6:00 PM <basex-talk-request at mailman.uni-konstanz.de> wrote: > Send BaseX-Talk mailing list submissions to > basex-talk at mailman.uni-konstanz.de > > To subscribe or unsubscribe via the World Wide Web, visit > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk > or, via email, send a message with subject or body 'help' to > basex-talk-request at mailman.uni-konstanz.de > > You can reach the person managing the list at > basex-talk-owner at mailman.uni-konstanz.de > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of BaseX-Talk digest..." > > > Today's Topics: > > 1. Re: Make use of external Identity Management for BaseX > (Marco Lettere) > 2. Re: Make use of external Identity Management for BaseX > (Marco Lettere) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 3 May 2021 09:20:45 +0200 > From: Marco Lettere <m.lettere at gmail.com> > To: basex-talk at mailman.uni-konstanz.de > Subject: Re: [basex-talk] Make use of external Identity Management for > BaseX > Message-ID: <0978b86f-a884-052c-dd2c-0eb18291f7f5 at gmail.com> > Content-Type: text/plain; charset="utf-8"; Format="flowed" > > Hi Adam, > sorry but licensing terms are out of our choice. > We've developed that code in the framework of EU H2020 funded projects > [1,2] thus we have to adhere to the policies of the Institution we > cooperate with (Italian Council of Research). > > Anyway as I told this code is more a proof of concept for administrative > activities related to batch creation of clients ... Feel free to use and > adapt the code as you prefer. > > Regards, > Marco. > > [1] https://www.blue-cloud.org/ > [2] http://project.sobigdata.eu/ > > On 01/05/21 05:29, Adam Law wrote: > > If Rob isn't interested, I certain am... Yes please share > > > > >>We have also a RestXQ module that in combination with basex:perm > > annotations protects access to a GUI implementing the Oauth2 Code-grant > > flow. If Rob is interested we could share. > > > > Many thanks for sharing > > > https://code-repo.d4science.org/gCubeSystem/d4science-keycloak-themes/src/branch/master/src/utils/xquery > > < > https://code-repo.d4science.org/gCubeSystem/d4science-keycloak-themes/src/branch/master/src/utils/xquery > > > > > > This is a bit forward of me, but would you consider changing?the > > license away from European Union Public Licence which appears to be > > 'copyleft' to say BSD 3-Clause, MIT, ... > > > > Adam > > > > On Fri, Apr 30, 2021 at 6:00 PM > > <basex-talk-request at mailman.uni-konstanz.de > > <mailto:basex-talk-request at mailman.uni-konstanz.de>> wrote: > > > > Send BaseX-Talk mailing list submissions to > > basex-talk at mailman.uni-konstanz.de > > <mailto:basex-talk at mailman.uni-konstanz.de> > > > > To subscribe or unsubscribe via the World Wide Web, visit > > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk > > <https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk> > > or, via email, send a message with subject or body 'help' to > > basex-talk-request at mailman.uni-konstanz.de > > <mailto:basex-talk-request at mailman.uni-konstanz.de> > > > > You can reach the person managing the list at > > basex-talk-owner at mailman.uni-konstanz.de > > <mailto:basex-talk-owner at mailman.uni-konstanz.de> > > > > When replying, please edit your Subject line so it is more specific > > than "Re: Contents of BaseX-Talk digest..." > > > > > > Today's Topics: > > > > ? ?1. Make use of external Identity Management for BaseX (Rob) > > ? ?2. Re: Reloading jars on a running http server. (Reece Dunn) > > ? ?3. Getting profile information in server responses. (Reece Dunn) > > ? ?4. Re: Make use of external Identity Management for BaseX > > ? ? ? (Christian Gr?n) > > ? ?5. Re: Reloading jars on a running http server. (Christian Gr?n) > > ? ?6. Re: Getting profile information in server responses. > > ? ? ? (Christian Gr?n) > > ? ?7. Re: Reloading jars on a running http server. (Reece Dunn) > > ? ?8. Re: Reloading jars on a running http server. (Christian Gr?n) > > ? ?9. Re: Make use of external Identity Management for BaseX > > ? ? ? (Marco Lettere) > > > > > > > ---------------------------------------------------------------------- > > > > Message: 1 > > Date: Thu, 29 Apr 2021 15:54:08 +0200 > > From: Rob <private at tjalma.com <mailto:private at tjalma.com>> > > To: BaseX <basex-talk at mailman.uni-konstanz.de > > <mailto:basex-talk at mailman.uni-konstanz.de>> > > Subject: [basex-talk] Make use of external Identity Management for > > ? ? ? ? BaseX > > Message-ID: <39036EF3-E67D-470D-B2F4-E6FBFFDF40E6 at tjalma.com > > <mailto:39036EF3-E67D-470D-B2F4-E6FBFFDF40E6 at tjalma.com>> > > Content-Type: text/plain;? ? ? ?charset=utf-8 > > > > Hi, > > > > I have a question. > > Can BaseX make use of an Identity Management application like > > Keycloak for Users? > > > > I can?t find anything about it :) > > > > With kind regards, > > Rob Tjalma > > > > ------------------------------ > > > > Message: 2 > > Date: Thu, 29 Apr 2021 20:48:09 +0100 > > From: Reece Dunn <msclrhd at googlemail.com > > <mailto:msclrhd at googlemail.com>> > > To: Christian Gr?n <christian.gruen at gmail.com > > <mailto:christian.gruen at gmail.com>> > > Cc: BaseX <basex-talk at mailman.uni-konstanz.de > > <mailto:basex-talk at mailman.uni-konstanz.de>> > > Subject: Re: [basex-talk] Reloading jars on a running http server. > > Message-ID: > > ? ? ? ? > > <CAGdtn24Qdgbe3=nebYA1je4hCrZVAgi_sercCRxsTxmZcWcAxQ at mail.gmail.com > > <mailto:nebYA1je4hCrZVAgi_sercCRxsTxmZcWcAxQ at mail.gmail.com>> > > Content-Type: text/plain; charset="utf-8" > > > > Hi Christian, > > > > Thanks for the response. Unfortunately, I've not been able to get the > > reloading working. > > > > Kind regards, > > Reece > > > > On Wed, 21 Apr 2021 at 18:49, Christian Gr?n > > <christian.gruen at gmail.com <mailto:christian.gruen at gmail.com>> > > wrote: > > > > > Hi Reece, > > > > > > If you install your Java code as JAR file in the repository [1], > the > > > code will be loaded and unloaded every time when your query is > > > executed. If you get an error message? > > > > > >? ?java.lang.reflect.InaccessibleObjectException: Unable to make > > field > > > private final jdk.internal.loader.URLClassPath > > > java.net.URLClassLoader.ucp accessible: module java.base does not > > > "opens java.net <http://java.net>" to unnamed module @79e2c065 > > > > > > ?unloading fails [2], as you?re probably using a more recent > version > > > of the JDK, which restricts reflective access to internal > variables. > > > You can get around this by adding Java flags at startup time: > > > > > >? --add-opens java.base/java.net <http://java.net>=ALL-UNNAMED > > >? --add-opens java.base/jdk.internal.loader=ALL-UNNAMED > > > > > > Maybe there are better solutions to unload JAR files today. > > > Suggestions are welcome! > > > > > > Hope this helps, > > > Christian > > > > > > [1] https://docs.basex.org/wiki/Repository#Java > > <https://docs.basex.org/wiki/Repository#Java> > > > [2] > > > > > > https://github.com/BaseXdb/basex/blob/master/basex-core/src/main/java/org/basex/util/JarLoader.java#L34 > > < > https://github.com/BaseXdb/basex/blob/master/basex-core/src/main/java/org/basex/util/JarLoader.java#L34 > > > > > > > > > > > > > > On Tue, Apr 20, 2021 at 6:44 PM Reece Dunn > > <msclrhd at googlemail.com <mailto:msclrhd at googlemail.com>> wrote: > > > > > > > > Hi all, > > > > > > > > I'm working on a Java class that I'm importing into an XQuery, > > so I can > > > do additional processing on the data that isn't easily > > expressible in > > > XQuery (or XSLT). In order to get BaseX to pick up a modified > > version of > > > the jar file I'm building, I'm restarting the BaseX http server. > > > > > > > > This makes it slower to turn around testing the changes. Is > > there a > > > better way of doing this? > > > > > > > > Kind regards, > > > > Reece > > > > >
ML
Marco Lettere3 May 2021 14:13 #
Yes, that is another good idea. For the protection of REST API services we are currently also experimenting with extending Nginx in order to become a full-fledged authn/authz enforcer that will sit in front and absorb all the security concerns on behalf of the services themselves. It just feels less natural for protecting front facing applications (with GUIs) where we still prefer doing the code_grant flow internally. m2c. M.
Quoted text · Adam Law · 301 lines
On 03/05/21 14:07, Adam Law wrote: > Thanks Marco, I understand. > > As an aside for others, a GO edge router with BaseX is another option > - say https://github.com/thomseddon/traefik-forward-auth > <https://github.com/thomseddon/traefik-forward-auth>. OIDC, ACME and > SSL are all built in. > > BaseX can trust / check the forwarded cookie as part of BaseX > permissions checking. https://docs.basex.org/wiki/Permissions > <https://docs.basex.org/wiki/Permissions> > > Adam > > > > > > On Mon, May 3, 2021 at 6:00 PM > <basex-talk-request at mailman.uni-konstanz.de > <mailto:basex-talk-request at mailman.uni-konstanz.de>> wrote: > > Send BaseX-Talk mailing list submissions to > basex-talk at mailman.uni-konstanz.de > <mailto:basex-talk at mailman.uni-konstanz.de> > > To subscribe or unsubscribe via the World Wide Web, visit > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk > <https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk> > or, via email, send a message with subject or body 'help' to > basex-talk-request at mailman.uni-konstanz.de > <mailto:basex-talk-request at mailman.uni-konstanz.de> > > You can reach the person managing the list at > basex-talk-owner at mailman.uni-konstanz.de > <mailto:basex-talk-owner at mailman.uni-konstanz.de> > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of BaseX-Talk digest..." > > > Today's Topics: > > 1. Re: Make use of external Identity Management for BaseX > (Marco Lettere) > 2. Re: Make use of external Identity Management for BaseX > (Marco Lettere) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 3 May 2021 09:20:45 +0200 > From: Marco Lettere <m.lettere at gmail.com <mailto:m.lettere at gmail.com>> > To: basex-talk at mailman.uni-konstanz.de > <mailto:basex-talk at mailman.uni-konstanz.de> > Subject: Re: [basex-talk] Make use of external Identity Management for > BaseX > Message-ID: <0978b86f-a884-052c-dd2c-0eb18291f7f5 at gmail.com > <mailto:0978b86f-a884-052c-dd2c-0eb18291f7f5 at gmail.com>> > Content-Type: text/plain; charset="utf-8"; Format="flowed" > > Hi Adam, > sorry but licensing terms are out of our choice. > We've developed that code in the framework of EU H2020 funded > projects > [1,2] thus we have to adhere to the policies of the Institution we > cooperate with (Italian Council of Research). > > Anyway as I told this code is more a proof of concept for > administrative > activities related to batch creation of clients ... Feel free to > use and > adapt the code as you prefer. > > Regards, > Marco. > > [1] https://www.blue-cloud.org/ <https://www.blue-cloud.org/> > [2] http://project.sobigdata.eu/ <http://project.sobigdata.eu/> > > On 01/05/21 05:29, Adam Law wrote: > > If Rob isn't interested, I certain am... Yes please share > > > > >>We have also a RestXQ module that in combination with basex:perm > > annotations protects access to a GUI implementing the Oauth2 > Code-grant > > flow. If Rob is interested we could share. > > > > Many thanks for sharing > > > https://code-repo.d4science.org/gCubeSystem/d4science-keycloak-themes/src/branch/master/src/utils/xquery > <https://code-repo.d4science.org/gCubeSystem/d4science-keycloak-themes/src/branch/master/src/utils/xquery> > > > > <https://code-repo.d4science.org/gCubeSystem/d4science-keycloak-themes/src/branch/master/src/utils/xquery > <https://code-repo.d4science.org/gCubeSystem/d4science-keycloak-themes/src/branch/master/src/utils/xquery>> > > > > This is a bit forward of me, but would you consider changing?the > > license away from European Union Public Licence which appears to be > > 'copyleft' to say BSD 3-Clause, MIT, ... > > > > Adam > > > > On Fri, Apr 30, 2021 at 6:00 PM > > <basex-talk-request at mailman.uni-konstanz.de > <mailto:basex-talk-request at mailman.uni-konstanz.de> > > <mailto:basex-talk-request at mailman.uni-konstanz.de > <mailto:basex-talk-request at mailman.uni-konstanz.de>>> wrote: > > > > Send BaseX-Talk mailing list submissions to > > basex-talk at mailman.uni-konstanz.de > <mailto:basex-talk at mailman.uni-konstanz.de> > > <mailto:basex-talk at mailman.uni-konstanz.de > <mailto:basex-talk at mailman.uni-konstanz.de>> > > > > To subscribe or unsubscribe via the World Wide Web, visit > > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk > <https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk> > > <https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk > <https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk>> > > or, via email, send a message with subject or body 'help' to > > basex-talk-request at mailman.uni-konstanz.de > <mailto:basex-talk-request at mailman.uni-konstanz.de> > > <mailto:basex-talk-request at mailman.uni-konstanz.de > <mailto:basex-talk-request at mailman.uni-konstanz.de>> > > > > You can reach the person managing the list at > > basex-talk-owner at mailman.uni-konstanz.de > <mailto:basex-talk-owner at mailman.uni-konstanz.de> > > <mailto:basex-talk-owner at mailman.uni-konstanz.de > <mailto:basex-talk-owner at mailman.uni-konstanz.de>> > > > > When replying, please edit your Subject line so it is more > specific > > than "Re: Contents of BaseX-Talk digest..." > > > > > > Today's Topics: > > > > ? ?1. Make use of external Identity Management for BaseX (Rob) > > ? ?2. Re: Reloading jars on a running http server. (Reece Dunn) > > ? ?3. Getting profile information in server responses. > (Reece Dunn) > > ? ?4. Re: Make use of external Identity Management for BaseX > > ? ? ? (Christian Gr?n) > > ? ?5. Re: Reloading jars on a running http server. > (Christian Gr?n) > > ? ?6. Re: Getting profile information in server responses. > > ? ? ? (Christian Gr?n) > > ? ?7. Re: Reloading jars on a running http server. (Reece Dunn) > > ? ?8. Re: Reloading jars on a running http server. > (Christian Gr?n) > > ? ?9. Re: Make use of external Identity Management for BaseX > > ? ? ? (Marco Lettere) > > > > > > > ---------------------------------------------------------------------- > > > > Message: 1 > > Date: Thu, 29 Apr 2021 15:54:08 +0200 > > From: Rob <private at tjalma.com <mailto:private at tjalma.com> > <mailto:private at tjalma.com <mailto:private at tjalma.com>>> > > To: BaseX <basex-talk at mailman.uni-konstanz.de > <mailto:basex-talk at mailman.uni-konstanz.de> > > <mailto:basex-talk at mailman.uni-konstanz.de > <mailto:basex-talk at mailman.uni-konstanz.de>>> > > Subject: [basex-talk] Make use of external Identity > Management for > > ? ? ? ? BaseX > > Message-ID: <39036EF3-E67D-470D-B2F4-E6FBFFDF40E6 at tjalma.com > <mailto:39036EF3-E67D-470D-B2F4-E6FBFFDF40E6 at tjalma.com> > > <mailto:39036EF3-E67D-470D-B2F4-E6FBFFDF40E6 at tjalma.com > <mailto:39036EF3-E67D-470D-B2F4-E6FBFFDF40E6 at tjalma.com>>> > > Content-Type: text/plain;? ? ? ?charset=utf-8 > > > > Hi, > > > > I have a question. > > Can BaseX make use of an Identity Management application like > > Keycloak for Users? > > > > I can?t find anything about it :) > > > > With kind regards, > > Rob Tjalma > > > > ------------------------------ > > > > Message: 2 > > Date: Thu, 29 Apr 2021 20:48:09 +0100 > > From: Reece Dunn <msclrhd at googlemail.com > <mailto:msclrhd at googlemail.com> > > <mailto:msclrhd at googlemail.com <mailto:msclrhd at googlemail.com>>> > > To: Christian Gr?n <christian.gruen at gmail.com > <mailto:christian.gruen at gmail.com> > > <mailto:christian.gruen at gmail.com > <mailto:christian.gruen at gmail.com>>> > > Cc: BaseX <basex-talk at mailman.uni-konstanz.de > <mailto:basex-talk at mailman.uni-konstanz.de> > > <mailto:basex-talk at mailman.uni-konstanz.de > <mailto:basex-talk at mailman.uni-konstanz.de>>> > > Subject: Re: [basex-talk] Reloading jars on a running http > server. > > Message-ID: > > ? ? ? ? > > > <CAGdtn24Qdgbe3=nebYA1je4hCrZVAgi_sercCRxsTxmZcWcAxQ at mail.gmail.com > <mailto:nebYA1je4hCrZVAgi_sercCRxsTxmZcWcAxQ at mail.gmail.com> > > <mailto:nebYA1je4hCrZVAgi_sercCRxsTxmZcWcAxQ at mail.gmail.com > <mailto:nebYA1je4hCrZVAgi_sercCRxsTxmZcWcAxQ at mail.gmail.com>>> > > Content-Type: text/plain; charset="utf-8" > > > > Hi Christian, > > > > Thanks for the response. Unfortunately, I've not been able > to get the > > reloading working. > > > > Kind regards, > > Reece > > > > On Wed, 21 Apr 2021 at 18:49, Christian Gr?n > > <christian.gruen at gmail.com > <mailto:christian.gruen at gmail.com> > <mailto:christian.gruen at gmail.com <mailto:christian.gruen at gmail.com>>> > > wrote: > > > > > Hi Reece, > > > > > > If you install your Java code as JAR file in the > repository [1], the > > > code will be loaded and unloaded every time when your query is > > > executed. If you get an error message? > > > > > >? ?java.lang.reflect.InaccessibleObjectException: Unable to > make > > field > > > private final jdk.internal.loader.URLClassPath > > > java.net.URLClassLoader.ucp accessible: module java.base > does not > > > "opens java.net <http://java.net> <http://java.net > <http://java.net>>" to unnamed module @79e2c065 > > > > > > ?unloading fails [2], as you?re probably using a more > recent version > > > of the JDK, which restricts reflective access to internal > variables. > > > You can get around this by adding Java flags at startup time: > > > > > >? --add-opens java.base/java.net <http://java.net> > <http://java.net <http://java.net>>=ALL-UNNAMED > > >? --add-opens java.base/jdk.internal.loader=ALL-UNNAMED > > > > > > Maybe there are better solutions to unload JAR files today. > > > Suggestions are welcome! > > > > > > Hope this helps, > > > Christian > > > > > > [1] https://docs.basex.org/wiki/Repository#Java > <https://docs.basex.org/wiki/Repository#Java> > > <https://docs.basex.org/wiki/Repository#Java > <https://docs.basex.org/wiki/Repository#Java>> > > > [2] > > > > > > https://github.com/BaseXdb/basex/blob/master/basex-core/src/main/java/org/basex/util/JarLoader.java#L34 > <https://github.com/BaseXdb/basex/blob/master/basex-core/src/main/java/org/basex/util/JarLoader.java#L34> > > > <https://github.com/BaseXdb/basex/blob/master/basex-core/src/main/java/org/basex/util/JarLoader.java#L34 > <https://github.com/BaseXdb/basex/blob/master/basex-core/src/main/java/org/basex/util/JarLoader.java#L34>> > > > > > > > > > > > > On Tue, Apr 20, 2021 at 6:44 PM Reece Dunn > > <msclrhd at googlemail.com <mailto:msclrhd at googlemail.com> > <mailto:msclrhd at googlemail.com <mailto:msclrhd at googlemail.com>>> > wrote: > > > > > > > > Hi all, > > > > > > > > I'm working on a Java class that I'm importing into an > XQuery, > > so I can > > > do additional processing on the data that isn't easily > > expressible in > > > XQuery (or XSLT). In order to get BaseX to pick up a modified > > version of > > > the jar file I'm building, I'm restarting the BaseX http > server. > > > > > > > > This makes it slower to turn around testing the changes. Is > > there a > > > better way of doing this? > > > > > > > > Kind regards, > > > > Reece > > > > >

⚡Generated with XQuery