atom feed60 messages in org.apache.incubator.sling-devRe: [jira] Commented: (SLING-249) All...
FromSent OnAttachments
Vidar S. Ramdal (JIRA)Feb 15, 2008 7:27 am 
Felix Meschberger (JIRA)Feb 15, 2008 7:35 am 
Bertrand Delacretaz (JIRA)Feb 15, 2008 2:23 pm 
eric...@acquitygroup.comFeb 15, 2008 5:52 pm 
Felix MeschbergerFeb 16, 2008 2:09 am 
Tobias Bocanegra (JIRA)Feb 17, 2008 9:14 am 
Vidar S. Ramdal (JIRA)Feb 18, 2008 12:24 am 
Vidar S. Ramdal (JIRA)Feb 18, 2008 12:26 am 
eric marts (JIRA)Feb 18, 2008 3:06 pm 
Vidar S. Ramdal (JIRA)Mar 26, 2008 3:09 am 
Bertrand Delacretaz (JIRA)Mar 26, 2008 3:19 am 
Carsten Ziegeler (JIRA)Apr 30, 2008 11:39 am 
Felix Meschberger (JIRA)Nov 20, 2008 3:06 am 
Felix Meschberger (JIRA)Nov 20, 2008 3:12 am 
Felix Meschberger (JIRA)Nov 20, 2008 3:14 am 
Vidar S. Ramdal (JIRA)Nov 20, 2008 3:36 am 
Felix Meschberger (JIRA)Nov 20, 2008 4:02 am 
Vidar S. Ramdal (JIRA)Nov 20, 2008 4:14 am 
Alexander KlimetschekNov 20, 2008 4:35 am 
Felix Meschberger (JIRA)Nov 20, 2008 5:36 am 
Bertrand Delacretaz (JIRA)Nov 20, 2008 5:50 am 
Alexander Klimetschek (JIRA)Nov 20, 2008 7:14 am 
Bertrand DelacretazNov 20, 2008 8:56 am 
Vidar S. Ramdal (JIRA)Nov 20, 2008 9:16 am 
Vidar S. Ramdal (JIRA)Nov 20, 2008 9:20 am 
Bertrand Delacretaz (JIRA)Nov 20, 2008 9:26 am 
Felix MeschbergerNov 20, 2008 11:16 pm 
Felix Meschberger (JIRA)Nov 20, 2008 11:24 pm 
Alexander KlimetschekNov 21, 2008 12:49 am 
Vidar RamdalNov 21, 2008 1:03 am 
Alexander KlimetschekNov 21, 2008 1:41 am 
Bertrand Delacretaz (JIRA)Nov 21, 2008 3:14 am 
Felix Meschberger (JIRA)Nov 21, 2008 3:28 am 
Felix MeschbergerNov 21, 2008 3:33 am 
Alexander KlimetschekNov 21, 2008 3:36 am 
Felix MeschbergerNov 21, 2008 3:46 am 
Felix MeschbergerNov 21, 2008 3:51 am 
Alexander KlimetschekNov 21, 2008 5:24 am 
Vidar RamdalNov 21, 2008 7:21 am 
Alexander KlimetschekNov 21, 2008 8:47 am 
Roy T. FieldingNov 21, 2008 4:11 pm 
David NueschelerNov 22, 2008 3:49 am 
Felix MeschbergerNov 23, 2008 10:30 am 
Felix MeschbergerNov 23, 2008 1:41 pm 
Vidar RamdalNov 24, 2008 12:59 am 
Felix MeschbergerNov 24, 2008 1:31 am 
Bertrand DelacretazNov 24, 2008 1:37 am 
Bertrand DelacretazNov 24, 2008 1:39 am 
Felix MeschbergerNov 24, 2008 5:06 am 
Felix MeschbergerNov 24, 2008 5:09 am 
Felix Meschberger (JIRA)Nov 25, 2008 3:29 pm 
Felix Meschberger (JIRA)Nov 25, 2008 4:07 pm 
Roy T. FieldingNov 26, 2008 2:45 pm 
Roy T. FieldingNov 26, 2008 2:54 pm 
Roy T. FieldingNov 26, 2008 3:04 pm 
Felix MeschbergerNov 27, 2008 4:25 am 
Felix MeschbergerNov 27, 2008 4:31 am 
Roy T. FieldingDec 3, 2008 3:35 pm 
Felix Meschberger (JIRA)Jan 26, 2009 4:31 am 
Vidar S. Ramdal (JIRA)Jan 27, 2009 4:36 am 
Subject:Re: [jira] Commented: (SLING-249) Allow mapping nodes to internet domains
From:Roy T. Fielding (fiel@gbiv.com)
Date:Nov 21, 2008 4:11:13 pm
List:org.apache.incubator.sling-dev

Sounds like an easy way to bypass delegated security.

I don't like the idea of sprinkling root-level aliases all over the content tree. I think it would be incredibly complex and impossible to maintain over time, and not even remotely scalable for virtual hosting setups.

I think that Sling should use a content tree to establish the root mappings; e.g.,

/etc/map/{scheme}/{host.port}/{uri_path}

with the default contents being

/etc/map/http/example.com.80/ +-- sling:redirect = "http://www.example.com/" www.example.com.80/ +-- sling:alias = "/example/" *.example.com.80/ +-- sling:redirect = "http://www.example.com/" localhost.*/ +-- sling:alias = "/content/" localhost.*/cgi-bin/ +-- sling:alias = "/scripts/" localhost.*/gateway/ +-- sling:alias = "http://gbiv.com/"

The resolver would check the path for a match by walking down the /etc/map tree. If there is a name match, then continue following that path. Otherwise, if there is a "*" match, then follow that path. If neither, then the mapping is defined by the properties on the last matching node.

sling:alias is a path mapping (what we call an internal redirect in httpd because it isn't visible to the client). Note that this can be very flexible: The last example configures a reverse proxy of

http://localhost/gateway/ <==> http://gbiv.com/

The advantage here is that the mappings are easily cached without new code, easily visible to users by looking at the tree, and versioned just like any other content. If you want to make the matching even faster, then this /etc/map tree can be walked as a regular expression and compiled each time the map tree changes, which is much easier than walking the entire content tree.

In my opinion, path mappings in the rest of the content tree should be limited to same-level aliases and external redirects.

....Roy