TODO - Security Design

Taskana is based on JAAS. Its security features start from the REST service.

Due to authentication requirements an additional wrapper is necessary to run the REST service. 

Its main purpose (besides starting the REST service as e.g. a web-container) is to implement server-side security. Worst case: The client side authorization does not work. The unauthorized user will only see the UI without any data.

We provide an example (taskana-rest-spring-example) which is using basicauth:

TODO: gliffy diagramm