https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/NETCONF-941 netconf <p>Our current implementation takes over the entire /.well-known namespace. This leads bad interaction with other HTTP endpoints discovery, as we end up leaking auth requirement. This is evidenced by:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre>opendaylight-user@root&gt;web:context-list Bundle ID │ Symbolic Name                                 │ Context Path │ Context Name      │ Rank │ Service ID │ Type        │ Scope     │ Registration Properties ──────────┼───────────────────────────────────────────────┼──────────────┼───────────────────┼──────┼────────────┼─────────────┼───────────┼─────────────────────────────────────────────────────────── 164       │ org.jolokia.osgi                              │ /            │ context:534196305 │ MAX  │ 0          │ HttpService │ static*   │ httpContext.id=context:534196305          │                                               │              │                   │      │            │             │           │ httpContext.path=/          │                                               │              │                   │      │            │             │           │ osgi.http.whiteboard.context.httpservice=context:534196305          │                                               │              │                   │      │            │             │           │ osgi.http.whiteboard.context.path=/ 312       │ org.ops4j.pax.web.pax-web-extender-whiteboard │ /            │ default           │ 0    │ 0          │ Whiteboard  │ static*   │ osgi.http.whiteboard.context.name=default          │                                               │              │                   │      │            │             │           │ osgi.http.whiteboard.context.path=/ 256       │ org.opendaylight.netconf.restconf-nb          │ /.well-known │ /.well-known.id   │ 0    │ 286        │ Whiteboard  │ singleton │ osgi.http.whiteboard.context.name=/.well-known.id          │                                               │              │                   │      │            │             │           │ osgi.http.whiteboard.context.path=/.well-known 342       │ org.opendaylight.netconf.sal-rest-docgen      │ /apidoc      │ /apidoc.id        │ 0    │ 291        │ Whiteboard  │ singleton │ osgi.http.whiteboard.context.name=/apidoc.id          │                                               │              │                   │      │            │             │           │ osgi.http.whiteboard.context.path=/apidoc 174       │ org.opendaylight.aaa.shiro                    │ /auth        │ /auth.id          │ 0    │ 270        │ Whiteboard  │ singleton │ osgi.http.whiteboard.context.name=/auth.id          │                                               │              │                   │      │            │             │           │ osgi.http.whiteboard.context.path=/auth 256       │ org.opendaylight.netconf.restconf-nb          │ /rests       │ /rests.id         │ 0    │ 279        │ Whiteboard  │ singleton │ osgi.http.whiteboard.context.name=/rests.id </pre> </div></div> <p>This has interplay with other protocols, for example <a href="https://github.com/OAI/OpenAPI-Specification/issues/2128" class="external-link" target="_blank" rel="nofollow noopener">OpenAPI</a>. As such we should only be contributing to resource discovery resources and not place auth requirements – those should be set by default handler policy, really.</p> <p>Separate out the two resources we provide (/.well-known/host-meta and /.well-known/host-meta.json) and disable authentication on them.</p> NETCONF-941

Separate root resource discovery

Improvement Medium Confirmed Unresolved Unassigned Robert Varga Sun, 8 Jan 2023 01:09:38 +0000 Mon, 29 May 2023 14:26:02 +0000 7.0.0 restconf-nb 0 1 <p>This needs a bit more thought, as we perhaps want to create a complete framework for plugging these in.</p> Development Rank 0|i043xr: