[Haskell-cafe] no Web-Security component in Haskell?

[José A. Romero L.]

There's yesod-auth:

http://www.yesodweb.com/book/authentication-and-authorization
https://hackage.haskell.org/package/yesod-auth

Cheers,

On Sat, May 23, 2015 at 3:49 PM, Thomas Koch <thomas at koch.ro> wrote:

> // moving the question with more info from haskell-cafe to web-devel
>
> Hallo,
>
> I already wrote a message with the same subject to haskell-cafe without
> reply.
>
> I did not found anything comparable to Spring Security[1][2] (Java) or
> Symfony
> Security[3] (PHP) in Haskell. Both components are used in web applications
> to
> grant or deny access to resources based on roles, ACLs or custom voters.
>
> [1] http://projects.spring.io/spring-security
> [2]
> http://docs.spring.io/autorepo/docs/spring-security/3.1.7.RELEASE/apidocs
> [3]
>
> http://api.symfony.com/master/Symfony/Component/Security/Core/SecurityContext.html
>
> A naive strategy would be to port the concepts of both components, which
> are
> very similar, to Haskell. They represent a lot of accumulated knowledge
> from
> many experts about web security.
>
> Or are there better ways to do web security in a powerful language like
> Haskell?
>
> There was some unfinished role-based-access-control effort in snap[4] that
> has
> been removed from git now.
>
> [4] https://groups.google.com/forum/#!topic/snap_framework/yUgSEVpP2GE
>
> There seem to be a more modern (and more complex) thing than Role-Based-
> Access-Control now, XACML[5] which is used inside Red Hats JBoss[6].
>
> [5] http://en.wikipedia.org/wiki/XACML
> [6] http://picketlink.org/about
>
> Regards, Thomas Koch
>
>
> _______________________________________________
> Haskell-Cafe mailing list
> Haskell-Cafe at haskell.org
> http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe
>



-- 
José A. Romero L.
escherdragon at gmail.com
"We who cut mere stones must always be envisioning cathedrals."
(Quarry worker's creed)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.haskell.org/pipermail/haskell-cafe/attachments/20150528/8177e947/attachment.html>