Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

FactsInfo
PTL (first and last name)Jonathan Gathman
Jira Project NameApplication Authorization Framework
Jira KeyAAF
Project IDaaf
Gerrit Repository (ies) URL

http://gerrit.onap.org/r/aaf/authz

http://gerrit.onap.org/r/aaf/sms

http://gerrit.onap.org/r/aaf/sshsm


Link to Wiki SpaceApplication Authorization Framework Project

Release Components Name

Components NameComponents Repository nameMaven Group IDComponents Description
authzaaf/authzorg.onap.aaf.authz

This module is used to organize all of the common artifacts and capabilities that are inherited by all modules.  This prevents duplication of these common artifacts, plugins.

All Microservices run from the same code/builds, etc, but with slightly different start mechanisms:



aaf-service

Core AAF Service - This RESTful API based service accepts Authentication and Authorization Queries, as well as Management of Namespaces, Roles, Permissions, Credentials


aaf-locateLocate - tracks all registered instances Globally of public services running anywhere, regardless of container type, bare metal, etc. by name and
other settings and provides a single place to support this configuration
version. Clients use this to talk to the closest entry. [ Dublin - this will also track internally for Container based names/ports ]
aaf-oauthOAuth support for Token Creation and Introspection. AAF's OAuth can also serve as a delegate OAuth model
aaf-cmCertificate Manager - This is a Registration Authority to talk to an External CA, and create Certificates with authorized, embedded Organization info for fast/secure Authentication. For ONAP, Certificate Manager also serves as the CA for Beijing through Dublin.
aaf-guiGraphical User Interface - AAF's GUI allows for viewing and command of all API functions, and is protected by AAF or Company defined Authentication as as well as AAF Authorization.
aaf-agentCommand line based tool that allows manual, script based automation and K8S based Container generation of Configuration and Certificates.
cadi
aaf/cadi
( Moved to Authz)
org.onap.aaf.
authz
cadi

Collection of Authentication and Authorization Plugins, technology specific clients, configuration tooling and encryption tooling, designed to enable Services to quickly and securely integrate Security.

shiroshiro

org.onap.aaf.cadi.aaf-shiro

Shiro Plugin
shiro-osgi-bundle org.onap.aaf.cadi.aaf-shiro-aafrealm-osgi-bundleSeparate built bundle for Shiro and OSGI
innoThis Repository is Deprecated... Coordinating with HelpDesk on best time to remove

luaplugin

aaf/luapluginorg.onap.aaf.luaplugin

A lua plugin to integrate AAF with MSB, which provides centralized auth features at the API Gateway.

smsaaf/smsorg.onap.aaf.smsSecret Management Service that will contain the webservice as well as client code for managing and accessing secrets.
sshsmaaf/sshsmorg.onap.aaf.sshsmA repository for softhsm modifications and hardware security plugin

Resources committed to the Release

...