Skip to content

Conversation

@Yang-Xie-OSS
Copy link
Contributor

… Camel

Here is a blog post that introduces a high-security API management infrastructure using Camel and Keycloak.

@Yang-Xie-OSS
Copy link
Contributor Author

I noticed that I should create a JIRA before the pull request? But I find there is no JIRA about creating a blog post in [1].
So I haven't created it yet. If I must create it, please tell me.
[1] https://issues.apache.org/jira/browse/CAMEL-17326?jql=project%20%3D%20CAMEL

@Yang-Xie-OSS
Copy link
Contributor Author

Hello @zregvart,
This is the blog post you invited. I'm sorry it's a bit late because we should do some examination procedures in our organization before publishing.

Copy link
Contributor

@oscerd oscerd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

just a minor finding.

Although the existing API management infrastructure has taken a security measure as token issuance & management, there are also three drawbacks of its security:

1. Inadequate token validation.
1. No API access management for each API.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think here we have point 2 and point 3 not 1.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@oscerd can you elaborate, the point of this project as I understood it to add additional token validation, i.e. test for invalidated tokens. Look at the Drawback 1: Inadequate token validation section

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I meant say it should .1,.2 and .3 and not .1,.1 and .1

@Yang-Xie-OSS
Copy link
Contributor Author

@tadayosi
Thanks for the review. I've fixed them. Please check.

@Yang-Xie-OSS
Copy link
Contributor Author

@oscerd
Thanks for the review. I've fixed it. Please check.

@Yang-Xie-OSS
Copy link
Contributor Author

@davsclaus
Thanks for the review. I've updated the date. Please check.

@zregvart
Copy link
Member

@Yang-Xie-OSS thanks for the blog post!

The preview is here https://pr-715--camel.netlify.app/blog/2021/12/api-management-infra/

Copy link
Member

@zregvart zregvart left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! This looks good to me, I'll leave this for a bit for any other folk to add comments before we merge this.

@zregvart zregvart merged commit 33970c2 into apache:main Dec 14, 2021
@Yang-Xie-OSS Yang-Xie-OSS deleted the blog-post branch December 15, 2021 08:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants