[Cosmo-dev] CMP and AJAX

[Travis Vachon]

Hi All

I'm currently redesigning the Cosmo administrative ui to use Spring MVC
instead of Struts. It would be nice to leverage CMP to do this, and even
more, create a Javascript library that would make asynchronous requests
to CMP so the interface could be AJAX-y.

I've been working on this Javascript library over the past couple days,
and have run into a snag related to HTTP Basic Authentication, which is
used by CMP.

Basically, relying on the browser to do HTTP Authentication ties us into
the browser authentication popup screen, while manually doing HTTP
Authentication has some security implications we should think through.

I've put together a wiki page summarizing the problem as I see it.

http://wiki.osafoundation.org/bin/view/Journal/AjaxCMPAuthentication09192006

This currently blocks work on the CMP Javascript library, so if people
could check it out and make comments, that would be great.

In general, the second option is kind of neat, and might enable a
sessionless interface, if we could make the security work. I'd be very
interested in working on it, but don't want to start without getting
some feedback.

Thanks,

Travis