Authentication and authorization support on Infinispan 6 ?

[rstrazza]

Hi, I've seen some posts about security including this one [ISPN-143] Security needs to be considered - JBoss Issue Tracker which seems a little vague to someone new to Infinispan. What I'm looking for is, does it have support for authentication of users and authorization for a given cache to be used ?

Something similar to what Hazelcast provides: http://www.hazelcast.com/docs/3.1/manual/multi_html/ch05.html

Thanks!

[nadirx]

Not yet, but it is coming in the next version of Infinispan. Here is the design document: Security

Input is highly welcome at this point.

If you are using HotRod and REST you can achieve some basic form of authentication / authorization using SSL certificates (both protocols) and the typical HTTP auth mechs (REST).

Tristan