[WiP] Add the Soffit prototype to your dev environment; DO NOT MERGE!

[drewwills]

I'm being asked about how to run the Soffit prototype by colleagues who would like to try out the demos and building soffits of their own. I would like to leave this delta here as an easy way to...

• Grab the code and merge it into your local dev portal
• Code review this change, per usual

This change is definitely work-in-progress (WiP); it's not ready to be merged into master.

Example Soffit widgets here: https://github.com/drewwills/soffit-samples

Documentation for creating your own soffits here: https://github.com/drewwills/Soffit

Some Additional Instructions

This delta declares a dependency on Soffit v. 0.9.0-SNAPSHOT. Clearly...

• We don't depend on SNAPSHOT builds in uPortal; that will need to be changed
• This dependency is not available in Maven Central

You will need to clone the Soffit project and perform a gradle clean install on it. But before you do that -- I have been building Soffit with Spring 3 for uPortal (Spring 4 for the soffits themselves). Change the springVersion property to 3.2.9.RELEASE in gradle.properties.

[andrewstuart]

Took me a while to realize that portlets are added as "Portlet > /uportal > Soffit Connector" rather than a separate item in the "Register Portlet" radio list.

But anyway, I put up a quick NodeJS POC that just returns some static(ish) HTML with the soffit request JSON spat out in the body.

[andrewstuart]

And another in Go, just for funsies.

@bpowell, You might be interested in this topic based on some of our discussions at Open Apereo. :-)

[andrewstuart]

And since I'm having fun with this...

while true; do nc -l 8082 <<EOF
HTTP/1.1 200 OK
X-Powered-By: $SHELL

<h1>Hello World from $SHELL</h1>
EOF
done;

[drewwills]

Nice @andrewstuart!

Adding 'Soffit Connector' as one of the radio options on the first screen after 'Register New Portlet' is on my list.

[andrewstuart]

In case anybody's following, I've updated the go example to include some remote XHR data, queried via json, a Dockerfile, and kubernetes Deployment, Service, and Ingress (necessary to expose externally and be able to grab the JSON via xhr).

[andrewstuart]

So I've added JWT generation to the go example (which depends on drewwills/Soffit#3) as well as validation, using RSA256, meaning it can be viewed by cut/pasting (from dev tools) at jwt.io and validated by pasting in the public key spit out via stdout.

In the future, I'd love to see JWT generated by uPortal and used for all soffit requests (one per user login session) as part of the JSON request API. It's a very simple format and a good choice for the Identity and Role assertions that can be authenticated cryptographically.

[bjagg]

I think JWT would address the security concern. It's an open standard with implementations in lots of languages.

[drewwills]

Heads up @andrewstuart -- I committed & pushed updates to the data model. The examples you have that rely on a username will need a slight adjustment.

[andrewstuart]

Sweet! I'll have to see what else I can throw into my example now. :-)

On Sat, Jun 18, 2016, 7:39 AM Drew Wills notifications@github.com wrote:

Heads up @andrewstuart https://github.com/andrewstuart -- I committed &
pushed updates to the data model. The examples you have that rely on a
username will need a slight adjustment.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
#665 (comment), or mute
the thread
https://github.com/notifications/unsubscribe/ACg1EeQM3_0F9slSDQUUnmcU8Q3UH3biks5qNAM7gaJpZM4Iwd1u
.

Andrew Stuart

[drewwills]

This PR is superseded by the uPortal 5 Overhaul PR, which includes Soffit support.

#715