{"action":"created","issue":{"url":"https://api.github.com/repos/me-box/databox/issues/206","repository_url":"https://api.github.com/repos/me-box/databox","labels_url":"https://api.github.com/repos/me-box/databox/issues/206/labels{/name}","comments_url":"https://api.github.com/repos/me-box/databox/issues/206/comments","events_url":"https://api.github.com/repos/me-box/databox/issues/206/events","html_url":"https://github.com/me-box/databox/issues/206","id":278112941,"number":206,"title":"sdk apps and websockets","user":{"login":"tlodge","id":126439,"avatar_url":"https://avatars0.githubusercontent.com/u/126439?v=4","gravatar_id":"","url":"https://api.github.com/users/tlodge","html_url":"https://github.com/tlodge","followers_url":"https://api.github.com/users/tlodge/followers","following_url":"https://api.github.com/users/tlodge/following{/other_user}","gists_url":"https://api.github.com/users/tlodge/gists{/gist_id}","starred_url":"https://api.github.com/users/tlodge/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tlodge/subscriptions","organizations_url":"https://api.github.com/users/tlodge/orgs","repos_url":"https://api.github.com/users/tlodge/repos","events_url":"https://api.github.com/users/tlodge/events{/privacy}","received_events_url":"https://api.github.com/users/tlodge/received_events","type":"User","site_admin":false},"labels":[{"id":593557988,"url":"https://api.github.com/repos/me-box/databox/labels/area/container-manager","name":"area/container-manager","color":"c2e0c6","default":false},{"id":763517804,"url":"https://api.github.com/repos/me-box/databox/labels/area/core-network","name":"area/core-network","color":"9fad24","default":false},{"id":593559135,"url":"https://api.github.com/repos/me-box/databox/labels/area/security","name":"area/security","color":"f9d0c4","default":false},{"id":712117138,"url":"https://api.github.com/repos/me-box/databox/labels/kind/rfc","name":"kind/rfc","color":"fbca04","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2017-11-30T13:04:50Z","updated_at":"2017-12-01T09:19:09Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"Currently any sdk-built databox apps that display data will use websockets for streaming data to a client browser.  I'm reliably informed that this will fail with the new core network, so need to figure out what needs to be put in place to make this work. "},"comment":{"url":"https://api.github.com/repos/me-box/databox/issues/comments/348443950","html_url":"https://github.com/me-box/databox/issues/206#issuecomment-348443950","issue_url":"https://api.github.com/repos/me-box/databox/issues/206","id":348443950,"user":{"login":"cgreenhalgh","id":194427,"avatar_url":"https://avatars0.githubusercontent.com/u/194427?v=4","gravatar_id":"","url":"https://api.github.com/users/cgreenhalgh","html_url":"https://github.com/cgreenhalgh","followers_url":"https://api.github.com/users/cgreenhalgh/followers","following_url":"https://api.github.com/users/cgreenhalgh/following{/other_user}","gists_url":"https://api.github.com/users/cgreenhalgh/gists{/gist_id}","starred_url":"https://api.github.com/users/cgreenhalgh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cgreenhalgh/subscriptions","organizations_url":"https://api.github.com/users/cgreenhalgh/orgs","repos_url":"https://api.github.com/users/cgreenhalgh/repos","events_url":"https://api.github.com/users/cgreenhalgh/events{/privacy}","received_events_url":"https://api.github.com/users/cgreenhalgh/received_events","type":"User","site_admin":false},"created_at":"2017-12-01T09:19:09Z","updated_at":"2017-12-01T09:19:09Z","author_association":"NONE","body":"My inclination would be \r\n\r\na) in the short term, to proxy websockets through the same proxy in the CM that handles app http interactions. I'm expecting all of this traffic - not just the databox UI per se - to run over HTTPS with (at least basic) authentication.\r\n\r\nb) to migrate this into a separate http front end/proxy component which terminates all http/s requests to the databox, with the CM requests from the app/UI also passing through it\r\n\r\nc) to work out exactly what we can and cannot enforce this way in terms of access control and information leakage for various types of client (databox app, standards-compliant browser, other) before deciding on a completely new way of handling (i) app/driver UIs and (ii) other off-the-box interactions.\r\n\r\nrelatedly \r\nd) to revisit the architectural realisation of the SDK views, e.g. are they best treated as app UIs? or is the view logically a separate authenticated viewer (not a databox app -running directly on the display device) that interacts with a (doesn't yet exist) home views driver?\r\n\r\n(personally i think the export service could still have a place for high risk, high-value one-off transactions, although we haven't actually got many apps that work in that mode.)"}}
{"actor":{"display_login":"cgreenhalgh"}}