[TIP] Apache module to authenticate a NativeSPApacheConfig to the backend app and sign attributes

[Pete Birkinshaw]

(I should have learned to read an entire thread before replying by now…)

I wasn’t aware of Ruby's Rack being compatible with mod_proxy_uwsgi either, so that’s another useful tool to have available - thanks.

In most cases now I’m plumbing things together with HTTP - it’s less efficient, and the issue of trusting/protecting headers is definitely a problem (hence this discussion) but it’s simple and universal - there’s a huge ecosystem of parts you can loosely couple together. The raw speed of some modern HTTP frameworks now makes up for some of the inefficiencies of the protocol.

Of course, you can then end up with a large number of loosely-coupled bits to manage...

Pete

-- 
Pete Birkinshaw, Founder 
Digital Identity Ltd | http://www.digitalidentity.ltd.uk 
Registered in England and Wales No. 7121888 

On 4 May 2018 at 10:24:05, Peter Schober (peter.schober at univie.ac.at) wrote:


Personally I wouldn't see those as -- or use their embedded -- HTTP  
servers, instead I'd use uwsgi as application server and connect to  
that from Apache httpd (running mod_shib) using mod_proxy_uwsgi.  


--  
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg  
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180504/af1b3ce5/attachment.html>