https://www.oasis-open.org/apps/org/workgroup/amqp/document.php?document_id=62097
I’ve looked through the AMQP CBS spec once again and I’m actually quite happy with it as it stands for the purpose of client authorization at a container, and I propose we start the process of turning it into a committee spec.
I believe we will then need a further complementary spec for authorization in federation scenarios that answers questions like:
- How does authorization work for establishing links through intermediaries? Is there a token attached to the link and is that being propagated?
- At the intermediary?
- At the ultimate link destination?
- How does authorization work for message based routing? Is there a token attached to the message?
- At the intermediary?
- At the ultimate message destination?
- How do we attach tokens to AMQP URIs as a parameters?
|
|
Clemens Vasters Messaging Platform Architect Microsoft Azure È+49
151 44063557 *
clemensv@microsoft.com
|
