Proposal to promote the community authkey module to an extension.

Mauro Bartolomeoli

This proposal is for GeoServer 2.16.

• Setup
• Under Discussion
• In Progress
• Completed
• Rejected
• Deferred

The authkey module adds token based authentication to the GeoServer security system, and allows to easily integrate GeoServer in an existing security infrastructure, where a user session is shared between different applications using a generated session key or token. Recently the module has been improved to include a usergroup service that can fill user details from the same source used for token validation. Being a very flexible system it can be adapted to a very wide range of scenarios (e.g. SSO, application to application security integration, etc.), so it would be nice to have it as an extension.

To move the community authkey module to extension status.

The authkey module has been a community module for a long time (at least from 2012).

At this point, the module already satisfy many of the requirements for promotion:

• The module have at least a "handful" of users: judging by Jira and mailing list activity, the module is used by at least a "handful" of users.
• The module have a designated and active maintainer: Mauro Bartolomeoli has worked a lot on the service with some PRs and is going to propose more improvements in the future.
• The module is considered "stable" by the majority of the PSC.
• The module maintains 40% test coverage: The package scores a 55% line coverage with Jacoco.
• The module has no IP violations.
• The module has a page in the user manual, here
• The maintainer (Mauro Bartolomeoli) has signed the GeoServer Contributor Agreement.

Project Steering Committee:

• Alessio Fabiani: +1
• Andrea Aime: +1
• Brad Hards: +1
• Ian Turton: +1
• Jody Garnett: +1
• Jukka Rahkonen: +1
• Kevin Smith: +1
• Simone Giannecchini: +1

• Email Discussion
• Pull Request - Coming
• Jira issue