Home | About | Blogs

Blogs

Learn from the perspectives of our industry experts in our series of blog posts.
Check back for new posts on the latest in select open source projects.

Latest Blog Postings

Adding RESTful APIs to Portlets

RESTful APIs, while not new, have only recently seen adoption in portlets. Why? They are often used to expose a service. In the case of portlets, there is often a more complete service that the portlet fronts. Another common use is to provide the back end of single page applications. It is this later use that is likely to drive more RESTful APIs in portlets.

Luckily, most portlets use Springframework with it's vast array of complimentary libraries. Springframework Web Services is one such library that directly supports implementing RESTful APIs.

AngularJS Portlet Testing with Jasmine

Recently, I had the opportunity to add a new testing suite to a portlet. That suite is Jasmine, a JavaScript testing framework. The Survey Portlet is a modern portlet which leverages AngularJS. The Angular controllers needed to be tested as part of the project. In most Maven-driven Java applications that I have seen there is no testing performed on JavaScript. Jasmine integration is a step to correct this common shortcoming.

LDAP TLS/SSL Config for the Shibboleth IdP Explained

Many Shibboleth IdP adopters use LDAP as provide both an authentication provider and an attribute source. There is always the question of "do we need to configure TLS/SSL for the IdP's connection to the LDAP server(s)?". My response is "always" because we need to protect the user's credentials even in the most trusted network. My question back to the client, "Why do wouldn't you?". Often the response is somewhere between "we've tried and we got it to work once, but then it broke sometime" and "we could never get it to work".

Successfully Integrating a SAML Service Provider

A common task when running a SAML Identity Provider (IdP) is integrating additional SAML service providers (SP). This task is not a trivial one, especially when compared to integrating CAS clients. New IdP administrators can run into problems before they even start with the technical task at hand because they aren't given the correct information to be successful. The request to do an integration usually goes something like this:

Pages