Description projet :
This tool aims at enabling seemless navigation between
PHP/MySQL, Zope.Plone, Java JSF & ASP.NET
based sites.
This should use asymetric cryptography and
1-time-usage redirection URLs. (which means
repeat-based
attack shall be futile)
SASL / LDAP interface is much appreciated.
Programmatic interface:
For each targe language, provide the following:
- one function to generate a /magic/ URL from:
A/ login
B/ password
C/ connection counter (to provide 1-time use URLs)
D/ Public key for the site considered
E/ "Base"-URL of this site
F/ Position in this site (the page we actually want
to go to)
G/ Dictionnary of {key, values} for optional data.
H/ template of connection details (typically,
something like "connect.php?id=$K&url=$U")
- one reception page (the target of the /magic/ URL
above) that includes in a set of hooks triggered when:
+ auth is ok
+ auth is not ok (with a clear diagnostic of WHY it
is not ok)
This reception page shall do the counter increment by
itself.
The reception page shall be able to maintain a set of
different couples of { private_key, usage_counter }
Utilities:
- Generator for Private/Public key-pair; (if utility
is written in java: best)
Deliverables:
- Java code + doc/javadocs (Sun JDK code - style)
- PHP code + "doxygen" docs
- Plone python example with doc. ZPT based!
- Clear technical definition of the cryptographic
systems used. Ideally a LyX/Texmacs document should be
OK;
- /All/ javadocs/doxygens/pydoc filled
- MySQL DB
- Ant based build scripts for the java part
- Java part is JSF/Hibernate based.
- AspectJ / Java5 OK
- PHP5 OK for PHP part (ideally I would appreciate
PHP code which is compatible with PHP4 & PHP5)
- Python 2.4 OK for the Plone part
- ASP.NET part shall run and compile with
Mono/Linux/MySQL
- Must include JUnit tests / PHPUnit etc.
- A "demo" kit (micro example with hello-world kind
of PHP / Zope.Plone / JSF sites providing seamless
integration with LDAP or SASL)
much appreciated.
Notes: you are encouraged to use BSD-license style
open cryptographic libraries such as openssl or
similar for java.
(legion of bouncy castle for instance)
I would like prices divided in 3 sections:
- Java / PHP
- option for ASP.NET
- option for Zope