#security

Interesting Links – 5 Oct 2016

In Accounts is Everything Meteor Does Right, Pete Corey points out that Meteor‘s Accounts package dictates how user authentication and authorization will work, period, and that this removal of choice actually makes it entirely usable. Having wrestled with Shiro and Crowd and Spring Security and JAAS, it’s a point that’s hard to argue with – and while users of Shiro, etc., will probably say that those packages work as well as Accounts does...

Oct 6, 2016 — 2 minute(s) read

#books #dsl #jaas #javascript #maslow #meteor #nodejs #scala-big-data #security #shiro #spring #tdd

Link: Jenkins over HTTPS with JNLP slaves

A user in ##java recently ran into a problem where he needed to connect Jenkins slaves to a master, using SSL – and it didn’t work, thanks to security. He helpfully wrote up how using correct policy files got it working. Jenkins is a continuous integration server – basically an application that runs your builds when changes occur in your source tree. Slaves allow the build to take place on different hardware configurations, as well as...

Apr 24, 2015 — 1 minute(s) read

#jenkins #l1 #policy #security