<div dir="ltr">Hi,<br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 26, 2017 at 6:14 PM, Werner Keil <span dir="ltr"><<a href="mailto:werner.keil@gmail.com" target="_blank">werner.keil@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr">Not sure, if I follow you on that?<div><br></div><div>java.security.Principal is not part of the CDI spec at all and only used by a special subclass of</div><div><span class="gmail-m_-6848049799389831186gmail-pl-en" style="box-sizing:border-box;color:rgb(121,93,163);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">AbstractEEBean</span><span style="color:rgb(36,41,46);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap"><T></span></div></div></blockquote><div><br></div><div>I think what Romain intended here is that the build-in Bean<T> for Principal is removed from CDI and moved to e.g. the Java EE Security spec. In case of Weld that would be org.jboss.weld.bean.builtin.ee.PrincipalBean</div><div><br></div><div>(see <a href="http://grepcode.com/file/repo1.maven.org/maven2/org.jboss.weld.servlet/weld-servlet/2.3.0.Beta3/org/jboss/weld/bean/builtin/ee/PrincipalBean.java#PrincipalBean">http://grepcode.com/file/repo1.maven.org/maven2/org.jboss.weld.servlet/weld-servlet/2.3.0.Beta3/org/jboss/weld/bean/builtin/ee/PrincipalBean.java#PrincipalBean</a>)</div><div><br></div><div>The Principal type itself is of course not part of CDI, but part of Java SE.</div><div><br></div><div>Btw, a CDI extension can easily scan the application for occurrences of Injection Points that have a Principal subtype as their target, and then dynamically add a specific Bean<T> for that. This is what we do in OmniFaces as well.</div><div><br></div><div>See</div><div><br></div><div>* Collecting types: <a href="https://github.com/omnifaces/omnifaces/blob/develop/src/main/java/org/omnifaces/cdi/param/ParamExtension.java#L61">https://github.com/omnifaces/omnifaces/blob/develop/src/main/java/org/omnifaces/cdi/param/ParamExtension.java#L61</a></div><div><br></div><div>* Adding a Bean<T> for each encountered type: <a href="https://github.com/omnifaces/omnifaces/blob/develop/src/main/java/org/omnifaces/cdi/param/ParamExtension.java#L74">https://github.com/omnifaces/omnifaces/blob/develop/src/main/java/org/omnifaces/cdi/param/ParamExtension.java#L74</a></div><div><br></div><div>Kind regards,</div><div>Arjan Tijms</div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><br><div class="gmail_extra"><br></div><div class="gmail_extra">The problem seems the generic T which Java at this point is unable to know about at runtime.</div><div class="gmail_extra"><br></div><div class="gmail_extra">It makes no difference, if you had</div><div class="gmail_extra"><span class="gmail-m_-6848049799389831186gmail-pl-en" style="box-sizing:border-box;color:rgb(121,93,163);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">PrincipalBean</span><span style="color:rgb(36,41,46);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap"> </span><span class="gmail-m_-6848049799389831186gmail-pl-k" style="box-sizing:border-box;color:rgb(167,29,93);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">extends</span><span style="color:rgb(36,41,46);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap"> </span><span class="gmail-m_-6848049799389831186gmail-pl-e" style="box-sizing:border-box;color:rgb(121,93,163);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">AbstractEEBean<<span class="gmail-m_-6848049799389831186gmail-pl-smi" style="box-sizing:border-box;color:rgb(51,51,51)">Principal</span>></span><br></div><div class="gmail_extra">or a<br></div><div class="gmail_extra"><span class="gmail-m_-6848049799389831186gmail-pl-en" style="box-sizing:border-box;color:rgb(121,93,163);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">StringBean</span><span style="color:rgb(36,41,46);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap"> </span><span class="gmail-m_-6848049799389831186gmail-pl-k" style="box-sizing:border-box;color:rgb(167,29,93);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">extends</span><span style="color:rgb(36,41,46);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap"> </span><span class="gmail-m_-6848049799389831186gmail-pl-e" style="box-sizing:border-box;color:rgb(121,93,163);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">AbstractBuiltInBean<<span class="gmail-m_-6848049799389831186gmail-pl-smi" style="box-sizing:border-box;color:rgb(51,51,51)">String</span>></span></div><div class="gmail_extra"><font color="#795da3" face="sfmono-regular, consolas, liberation mono, menlo, courier, monospace"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div><div class="gmail_extra">Even created a JUnit test in<div><div class="gmail-m_-6848049799389831186gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p style="margin:0px;border-collapse:collapse"><font face="arial, helvetica, sans-serif" size="1"><span lang="EN-US"><a href="https://github.com/unitsofmeasurement/uom-se/blob/master/src/test/java/tec/uom/se/AbsUnitTest.java" target="_blank">https://github.com/<wbr>unitsofmeasurement/uom-se/<wbr>blob/master/src/test/java/tec/<wbr>uom/se/AbsUnitTest.java</a><br></span></font></p><p style="margin:0px;border-collapse:collapse">Which under Java 8 returns<br></p><p style="margin:0px;border-collapse:collapse"><span class="gmail-m_-6848049799389831186gmail-pl-pds" style="box-sizing:border-box;color:rgb(24,54,145);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">"</span><span style="color:rgb(24,54,145);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">java.lang.reflect.<wbr>TypeVariable<D></span><span class="gmail-m_-6848049799389831186gmail-pl-pds" style="box-sizing:border-box;color:rgb(24,54,145);font-family:sfmono-regular,consolas,'liberation mono',menlo,courier,monospace;font-size:12px;white-space:pre-wrap">"</span><br></p><p style="margin:0px;border-collapse:collapse">No sign of "Length" which is what you'd hoped for (maybe we did not dig deep enough, maybe it won't work until a future Java version?)</p><p style="margin:0px;border-collapse:collapse"><font face="arial, helvetica, sans-serif" size="1"><span lang="EN-US"><br></span></font></p><p style="margin:0px;border-collapse:collapse"><font face="arial, helvetica, sans-serif" size="1"><span lang="EN-US">Werner </span></font></p><span lang="EN-GB"><div style="font-family:arial,helvetica,sans-serif"><br></div></span></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote"><span class="gmail-">On Wed, Apr 26, 2017 at 5:46 PM, <span dir="ltr"><<a href="mailto:cdi-dev-request@lists.jboss.org" target="_blank">cdi-dev-request@lists.jboss.<wbr>org</a>></span> wrote:<br></span><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><span class="gmail-">Send cdi-dev mailing list submissions to<br>
<a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailma<wbr>n/listinfo/cdi-dev</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:cdi-dev-request@lists.jboss.org" target="_blank">cdi-dev-request@lists.jboss.or<wbr>g</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:cdi-dev-owner@lists.jboss.org" target="_blank">cdi-dev-owner@lists.jboss.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of cdi-dev digest..."<br>
<br>
<br>
Today's Topics:<br>
<br></span>
1. Re: Types of Principal object (Romain Manni-Bucau)<br>
2. Re: Types of Principal object (Werner Keil)<br>
<br>
<br>
------------------------------<wbr>------------------------------<wbr>----------<br>
<br>
Message: 1<br>
Date: Wed, 26 Apr 2017 17:41:08 +0200<span class="gmail-"><br>
From: Romain Manni-Bucau <<a href="mailto:rmannibucau@gmail.com" target="_blank">rmannibucau@gmail.com</a>><br>
Subject: Re: [cdi-dev] Types of Principal object<br>
To: arjan tijms <<a href="mailto:arjan.tijms@gmail.com" target="_blank">arjan.tijms@gmail.com</a>><br>
Cc: cdi-dev <<a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a>><br>
Message-ID:<br></span>
<CACLE=7OK-JWXptMQxM8BUAvE2ab5<wbr>gOwNiNBHCDbjy=<a href="mailto:UNkuEGQg@mail.gmail.com" target="_blank">UNkuEGQg@mail.<wbr>gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<span class="gmail-"><br>
<br>
that's why security API needs a more typed API acting as an handler and not<br>
as a contextual instance, it would allow to unwrap the actual instance<br></span><span class="gmail-">
(like most specs do) but at CDI level it should also be possible. If not we<br>
have this built-in bean never working until you add another not mandatory<br></span>
spec - for CDI level. In other words either Principal is removed from CDI<br>
spec or it stays but it should be extended to be made usable IMHO.<div><div class="gmail-h5"><br>
<br>
<br>
Romain Manni-Bucau<br>
@rmannibucau <<a href="https://twitter.com/rmannibucau" rel="noreferrer" target="_blank">https://twitter.com/rmannibuc<wbr>au</a>> | Blog<br>
<<a href="https://blog-rmannibucau.rhcloud.com" rel="noreferrer" target="_blank">https://blog-rmannibucau.rhcl<wbr>oud.com</a>> | Old Blog<br>
<<a href="http://rmannibucau.wordpress.com" rel="noreferrer" target="_blank">http://rmannibucau.wordpress.<wbr>com</a>> | Github <<a href="https://github.com/rmannibucau" rel="noreferrer" target="_blank">https://github.com/rmannibuca<wbr>u</a>> |<br>
LinkedIn <<a href="https://www.linkedin.com/in/rmannibucau" rel="noreferrer" target="_blank">https://www.linkedin.com/in/r<wbr>mannibucau</a>> | JavaEE Factory<br>
<<a href="https://javaeefactory-rmannibucau.rhcloud.com" rel="noreferrer" target="_blank">https://javaeefactory-rmannib<wbr>ucau.rhcloud.com</a>><br>
<br>
2017-04-26 17:11 GMT+02:00 arjan tijms <<a href="mailto:arjan.tijms@gmail.com" target="_blank">arjan.tijms@gmail.com</a>>:<br>
<br>
> Hi,<br>
><br>
> We discussed this very issue in the Security API EG as well. In the<br>
> Security API the actual type *MUST* be retained as per the spec definition.<br>
><br>
> The problem in CDI, at least in Weld, is that a proxy is injected. This<br>
> happens via the build-in bean "PrincipalBean extends AbstractEEBean", where<br>
> AbstractEEBean does:<br>
><br>
> public abstract class AbstractEEBean<T> extends<br>
> AbstractStaticallyDecorableBui<wbr>ltInBean<T> {<br>
><br>
> private final T proxy;<br>
><br>
> protected AbstractEEBean(Class<T> type, Callable<T> callable,<br>
> BeanManagerImpl beanManager) {<br>
> super(beanManager, type);<br>
> this.proxy = new ProxyFactory<T>(beanManager.ge<wbr>tContextId(),<br>
> type, getTypes(), this).create(new EnterpriseTargetBeanInstance(t<wbr>ype, new<br>
> CallableMethodHandler(callable<wbr>)));<br>
> }<br>
> // ...<br>
> }<br>
><br>
> I'm not even sure if it's possible to downcast the proxy to the required<br>
> runtime type.<br>
><br>
> Also note that the Principal can change during the request. The simplest<br>
> case is when during an http request HttpServletRequest#logout is called.<br>
><br>
> Kind regards,<br>
> Arjan Tijms<br>
><br>
><br>
><br>
><br>
> On Wed, Apr 26, 2017 at 3:54 PM, John Ament <<a href="mailto:john.ament@spartasystems.com" target="_blank">john.ament@spartasystems.com</a>><br>
> wrote:<br>
><br>
>> Hey guys<br>
>><br>
>><br>
>> I raised a bug against the Weld guys, but think its worth an EG<br>
>> discussion. When a Principal object is injected, the only type it has is<br>
>> Principal. It does not retain the actual type used at runtime. This threw<br>
>> me off on some Keycloak integration I'm working on (in $dayjob). So I was<br>
>> wondering, is this expected from our POV or should it retain the types of<br>
>> the actual runtime instance?<br>
>><br>
>><br>
>> John<br>
>><br>
>> ------------------------------<br>
>> NOTICE: This e-mail message and any attachments may contain confidential,<br>
>> proprietary, and/or privileged information which should be treated<br>
>> accordingly. If you are not the intended recipient, please notify the<br>
>> sender immediately by return e-mail, delete this message, and destroy all<br>
>> physical and electronic copies. Thank you.<br>
>><br>
>> ______________________________<wbr>_________________<br>
>> cdi-dev mailing list<br>
>> <a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a><br>
>> <a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailma<wbr>n/listinfo/cdi-dev</a><br>
>><br>
>> Note that for all code provided on this list, the provider licenses the<br>
>> code under the Apache License, Version 2 (<a href="http://www.apache.org/license" rel="noreferrer" target="_blank">http://www.apache.org/license</a><br>
>> s/LICENSE-2.0.html). For all other ideas provided on this list, the<br>
>> provider waives all patent and other intellectual property rights inherent<br>
>> in such information.<br>
>><br>
><br>
><br>
> ______________________________<wbr>_________________<br>
> cdi-dev mailing list<br>
> <a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailma<wbr>n/listinfo/cdi-dev</a><br>
><br>
> Note that for all code provided on this list, the provider licenses the<br></div></div><span class="gmail-">
> code under the Apache License, Version 2 (<a href="http://www.apache.org/" rel="noreferrer" target="_blank">http://www.apache.org/</a><br>
> licenses/LICENSE-2.0.html). For all other ideas provided on this list,<br>
> the provider waives all patent and other intellectual property rights<br>
> inherent in such information.<br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br></span>
URL: <a href="http://lists.jboss.org/pipermail/cdi-dev/attachments/20170426/ad930662/attachment-0001.html" rel="noreferrer" target="_blank">http://lists.jboss.org/piperma<wbr>il/cdi-dev/attachments/2017042<wbr>6/ad930662/attachment-0001.<wbr>html</a><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Wed, 26 Apr 2017 17:44:04 +0200<br>
From: Werner Keil <<a href="mailto:werner.keil@gmail.com" target="_blank">werner.keil@gmail.com</a>><span class="gmail-"><br>
Subject: Re: [cdi-dev] Types of Principal object<br></span>
To: cdi-dev <<a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a>><br>
Message-ID:<br>
<CAAGawe1dmVUmgnrnmtV_oS0==ftt<wbr>YOe44ZhG4YfO+yme2=<a href="mailto:oT_A@mail.gmail.com" target="_blank">oT_A@mail.<wbr>gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<span class="gmail-"><br>
<br>
Seems the title of the thread was also not "reified" in this case.<br>
Sometimes reply just works, but if it was lost, sorry for that.<br>
<br>
Werner<br>
<br>
<br>
On Wed, Apr 26, 2017 at 5:41 PM, Werner Keil <<a href="mailto:werner.keil@gmail.com" target="_blank">werner.keil@gmail.com</a>> wrote:<br>
<br>
> We had similar challenges and discussions even before JSR 363 about<br>
> knowing what type of quantity you're dealing with types like<br>
><br></span>
> Unit<Q extends Quantity <<a href="http://unitsofmeasurement.github.io/unit-api/site/apidocs/javax/measure/Quantity.html" rel="noreferrer" target="_blank">http://unitsofmeasurement.git<wbr>hub.io/unit-api/site/apidocs/<wbr>javax/measure/Quantity.html</a>><<wbr>Q>><span class="gmail-"><br>
><br>
> I can only confirm Arjan's impression. And I had numerous conversations<br>
> with Andrew Kennedy, the Chief Architect behind the F# Units of Measurement<br>
> support and other .NET libraries about it. Where he mentioned shortcomings<br>
> of the Java language especially the lack of Reified Generics (<br>
> <a href="http://stackoverflow.com/questions/31876372/what-is-reification" rel="noreferrer" target="_blank">http://stackoverflow.com/quest<wbr>ions/31876372/what-is-reificat<wbr>ion</a>), which<br>
> C#, F# or other .NET languages got, but Java won't at least not until Java<br>
> 10, 11 or even later.<br>
><br>
> I tried a lot between 2010 and now but so far none of these Reflection<br>
> tricks and approaches were stable enough, so not sure, if it'll work any<br>
> better in this case (unless you implement CDI in C#;-)<br>
><br>
> Werner<br>
><br>
><br></span><span class="gmail-">
> On Wed, Apr 26, 2017 at 5:29 PM, <<a href="mailto:cdi-dev-request@lists.jboss.org" target="_blank">cdi-dev-request@lists.jboss.o<wbr>rg</a>> wrote:<br>
><br>
>> Send cdi-dev mailing list submissions to<br>
>> <a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a><br>
>><br>
>> To subscribe or unsubscribe via the World Wide Web, visit<br>
>> <a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailm<wbr>an/listinfo/cdi-dev</a><br>
>> or, via email, send a message with subject or body 'help' to<br>
>> <a href="mailto:cdi-dev-request@lists.jboss.org" target="_blank">cdi-dev-request@lists.jboss.o<wbr>rg</a><br>
>><br>
>> You can reach the person managing the list at<br>
>> <a href="mailto:cdi-dev-owner@lists.jboss.org" target="_blank">cdi-dev-owner@lists.jboss.org</a><br>
>><br>
>> When replying, please edit your Subject line so it is more specific<br>
>> than "Re: Contents of cdi-dev digest..."<br>
>><br>
>><br>
>> Today's Topics:<br>
>><br></span><span class="gmail-">
>> 1. Types of Principal object (John Ament)<br></span>
>> 2. Re: Types of Principal object (Romain Manni-Bucau)<br>
>> 3. Re: Types of Principal object (Matej Novotny)<br>
>> 4. Re: Types of Principal object (arjan tijms)<br>
>><br>
>><br>
>> ------------------------------<wbr>------------------------------<wbr>----------<br>
>><br>
>> Message: 1<span class="gmail-"><br>
>> Date: Wed, 26 Apr 2017 13:54:57 +0000<br>
>> From: John Ament <<a href="mailto:john.ament@spartasystems.com" target="_blank">john.ament@spartasystems.com</a>><br></span><span class="gmail-">
>> Subject: [cdi-dev] Types of Principal object<br></span>
>> To: cdi-dev <<a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a>><br>
>> Message-ID:<br>
>> <CY4PR04MB048607BF779F8680ED5<wbr>CE53898110@CY4PR04MB0486.<wbr>namprd<br>
>> <a href="http://04.prod.outlook.com" rel="noreferrer" target="_blank">04.prod.outlook.com</a>><br>
>><br>
>> Content-Type: text/plain; charset="iso-8859-1"<span class="gmail-"><br>
>><br>
>> Hey guys<br>
>><br>
>><br>
>> I raised a bug against the Weld guys, but think its worth an EG<br>
>> discussion. When a Principal object is injected, the only type it has is<br>
>> Principal. It does not retain the actual type used at runtime. This threw<br>
>> me off on some Keycloak integration I'm working on (in $dayjob). So I was<br>
>> wondering, is this expected from our POV or should it retain the types of<br>
>> the actual runtime instance?<br>
>><br>
>><br>
>> John<br>
>><br></span>
>> ______________________________<wbr>__<span class="gmail-"><br>
>> NOTICE: This e-mail message and any attachments may contain confidential,<br>
>> proprietary, and/or privileged information which should be treated<br>
>> accordingly. If you are not the intended recipient, please notify the<br>
>> sender immediately by return e-mail, delete this message, and destroy all<br>
>> physical and electronic copies. Thank you.<br></span><span class="gmail-">
>> -------------- next part --------------<br>
>> An HTML attachment was scrubbed...<br>
>> URL: <a href="http://lists.jboss.org/pipermail/cdi-dev/attachments/2017042" rel="noreferrer" target="_blank">http://lists.jboss.org/piperma<wbr>il/cdi-dev/attachments/2017042</a><br></span>
>> 6/b6740722/attachment-0001.htm<wbr>l<br>
>><br>
>> ------------------------------<br>
>><br>
>> Message: 2<br>
>> Date: Wed, 26 Apr 2017 16:38:01 +0200<span class="gmail-"><br>
>> From: Romain Manni-Bucau <<a href="mailto:rmannibucau@gmail.com" target="_blank">rmannibucau@gmail.com</a>><br>
>> Subject: Re: [cdi-dev] Types of Principal object<br></span><span class="gmail-">
>> To: John Ament <<a href="mailto:john.ament@spartasystems.com" target="_blank">john.ament@spartasystems.com</a>><br>
>> Cc: cdi-dev <<a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a>><br>
>> Message-ID:<br>
>> <CACLE=7N=<a href="mailto:pkvZDX3ULCFAK2Fhw8-bH0pbOsqctqsbkPhKk8i1VA@mail.gm" target="_blank">pkvZDX3ULCFAK2Fhw8-<wbr>bH0pbOsqctqsbkPhKk8i1VA@mail.g<wbr>m</a><br>
>> <a href="http://ail.com" rel="noreferrer" target="_blank">ail.com</a>><br>
>> Content-Type: text/plain; charset="utf-8"<br>
>><br>
>> Hi John,<br>
>><br>
>> agree CDI/security integration (mainly through Principal bean) is<br>
>> completely unusable in practise cause Principal type is too simple (name<br>
>> only) and casting is needed in 99.99% of apps. AFAIK It is tracked at<br>
>> <a href="https://issues.jboss.org/browse/CDI-597" rel="noreferrer" target="_blank">https://issues.jboss.org/brows<wbr>e/CDI-597</a>.<br>
>><br>
>><br></span><span class="gmail-">
>> Romain Manni-Bucau<br>
>> @rmannibucau <<a href="https://twitter.com/rmannibucau" rel="noreferrer" target="_blank">https://twitter.com/rmannibuc<wbr>au</a>> | Blog<br>
>> <<a href="https://blog-rmannibucau.rhcloud.com" rel="noreferrer" target="_blank">https://blog-rmannibucau.rhcl<wbr>oud.com</a>> | Old Blog<br>
>> <<a href="http://rmannibucau.wordpress.com" rel="noreferrer" target="_blank">http://rmannibucau.wordpress.<wbr>com</a>> | Github <<br>
>> <a href="https://github.com/rmannibucau" rel="noreferrer" target="_blank">https://github.com/rmannibucau</a><wbr>> |<br>
>> LinkedIn <<a href="https://www.linkedin.com/in/rmannibucau" rel="noreferrer" target="_blank">https://www.linkedin.com/in/r<wbr>mannibucau</a>> | JavaEE Factory<br>
>> <<a href="https://javaeefactory-rmannibucau.rhcloud.com" rel="noreferrer" target="_blank">https://javaeefactory-rmannib<wbr>ucau.rhcloud.com</a>><br>
>><br></span><span class="gmail-">
>> 2017-04-26 15:54 GMT+02:00 John Ament <<a href="mailto:john.ament@spartasystems.com" target="_blank">john.ament@spartasystems.com</a>><wbr>:<br>
>><br></span><div><div class="gmail-h5">
>> > Hey guys<br>
>> ><br>
>> ><br>
>> > I raised a bug against the Weld guys, but think its worth an EG<br>
>> > discussion. When a Principal object is injected, the only type it has<br>
>> is<br>
>> > Principal. It does not retain the actual type used at runtime. This<br>
>> threw<br>
>> > me off on some Keycloak integration I'm working on (in $dayjob). So I<br>
>> was<br>
>> > wondering, is this expected from our POV or should it retain the types<br>
>> of<br>
>> > the actual runtime instance?<br>
>> ><br>
>> ><br>
>> > John<br>
>> ><br>
>> > ------------------------------<br>
>> > NOTICE: This e-mail message and any attachments may contain<br>
>> confidential,<br>
>> > proprietary, and/or privileged information which should be treated<br>
>> > accordingly. If you are not the intended recipient, please notify the<br>
>> > sender immediately by return e-mail, delete this message, and destroy<br>
>> all<br>
>> > physical and electronic copies. Thank you.<br>
>> ><br>
>> > ______________________________<wbr>_________________<br>
>> > cdi-dev mailing list<br>
>> > <a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a><br>
>> > <a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailma<wbr>n/listinfo/cdi-dev</a><br>
>> ><br>
>> > Note that for all code provided on this list, the provider licenses the<br></div></div><span class="gmail-">
>> > code under the Apache License, Version 2 (<a href="http://www.apache.org/" rel="noreferrer" target="_blank">http://www.apache.org/</a><br>
>> > licenses/LICENSE-2.0.html). For all other ideas provided on this list,<br>
>> > the provider waives all patent and other intellectual property rights<br>
>> > inherent in such information.<br>
>> ><br>
>> -------------- next part --------------<br>
>> An HTML attachment was scrubbed...<br>
>> URL: <a href="http://lists.jboss.org/pipermail/cdi-dev/attachments/2017042" rel="noreferrer" target="_blank">http://lists.jboss.org/piperma<wbr>il/cdi-dev/attachments/2017042</a><br></span>
>> 6/19976ebd/attachment-0001.htm<wbr>l<br>
>><br>
>> ------------------------------<br>
>><br>
>> Message: 3<span class="gmail-"><br>
>> Date: Wed, 26 Apr 2017 10:48:40 -0400 (EDT)<br>
>> From: Matej Novotny <<a href="mailto:manovotn@redhat.com" target="_blank">manovotn@redhat.com</a>><br></span><span class="gmail-">
>> Subject: Re: [cdi-dev] Types of Principal object<br></span><span class="gmail-">
>> To: John Ament <<a href="mailto:john.ament@spartasystems.com" target="_blank">john.ament@spartasystems.com</a>><br>
>> Cc: cdi-dev <<a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a>><br>
>> Message-ID:<br>
>> <<a href="mailto:1098875365.1348630.1493218120014.JavaMail.zimbra@redhat.com" target="_blank">1098875365.1348630.149321812<wbr>0014.JavaMail.zimbra@redhat.<wbr>com</a>><br>
>> Content-Type: text/plain; charset=utf-8<br>
>><br>
>> Hey John,<br>
>><br>
>> just to shed some light.<br>
>> One of the reasons it works this way is because the types the actual<br>
>> Principal has might not be proxyable.<br></span><span class="gmail-">
>> And spec requires all built-in beans to be decorable - e.g. you need them<br>
>> to be proxyable (although the added value of principal decorator is ...eh,<br>
>> disputable at best?).<br>
>><br></span><span class="gmail-">
>> Therefore, it is safer/viable to create a proxyable wrapper object which<br>
>> implements Principal only and delegetas calls (that's what Weld does).<br>
>><br></span><div><div class="gmail-h5">
>> Otherwise I agree it could be nice to ahve a way to cast the object as<br>
>> the pure Principal interface doesn't help much.<br>
>><br>
>> Matej<br>
>><br>
>> ----- Original Message -----<br>
>> > From: "John Ament" <<a href="mailto:john.ament@spartasystems.com" target="_blank">john.ament@spartasystems.com</a>><br>
>> > To: "cdi-dev" <<a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a>><br>
>> > Sent: Wednesday, April 26, 2017 3:54:57 PM<br>
>> > Subject: [cdi-dev] Types of Principal object<br>
>> ><br>
>> ><br>
>> ><br>
>> > Hey guys<br>
>> ><br>
>> ><br>
>> ><br>
>> ><br>
>> > I raised a bug against the Weld guys, but think its worth an EG<br>
>> discussion.<br>
>> > When a Principal object is injected, the only type it has is Principal.<br>
>> It<br>
>> > does not retain the actual type used at runtime. This threw me off on<br>
>> some<br>
>> > Keycloak integration I'm working on (in $dayjob). So I was wondering, is<br>
>> > this expected from our POV or should it retain the types of the actual<br>
>> > runtime instance?<br>
>> ><br>
>> ><br>
>> ><br>
>> ><br>
>> > John<br>
>> ><br>
>> ><br>
>> ><br>
>> ><br>
>> > NOTICE: This e-mail message and any attachments may contain<br>
>> confidential,<br>
>> > proprietary, and/or privileged information which should be treated<br>
>> > accordingly. If you are not the intended recipient, please notify the<br>
>> sender<br>
>> > immediately by return e-mail, delete this message, and destroy all<br>
>> physical<br>
>> > and electronic copies. Thank you.<br>
>> ><br>
>> > ______________________________<wbr>_________________<br>
>> > cdi-dev mailing list<br>
>> > <a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a><br>
>> > <a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailma<wbr>n/listinfo/cdi-dev</a><br>
>> ><br>
>> > Note that for all code provided on this list, the provider licenses the<br>
>> code<br>
>> > under the Apache License, Version 2<br>
>> > (<a href="http://www.apache.org/licenses/LICENSE-2.0.html" rel="noreferrer" target="_blank">http://www.apache.org/license<wbr>s/LICENSE-2.0.html</a>). For all other ideas<br>
>> > provided on this list, the provider waives all patent and other<br>
>> intellectual<br>
>> > property rights inherent in such information.<br>
>><br>
>><br></div></div>
>> ------------------------------<br>
>><br>
>> Message: 4<br>
>> Date: Wed, 26 Apr 2017 17:11:11 +0200<span class="gmail-"><br>
>> From: arjan tijms <<a href="mailto:arjan.tijms@gmail.com" target="_blank">arjan.tijms@gmail.com</a>><br>
>> Subject: Re: [cdi-dev] Types of Principal object<br></span><span class="gmail-">
>> To: John Ament <<a href="mailto:john.ament@spartasystems.com" target="_blank">john.ament@spartasystems.com</a>><br>
>> Cc: cdi-dev <<a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a>><br>
>> Message-ID:<br></span>
>> <CAE=-AhA0PiXZpSKmy0XYoMxCFuy<wbr>xjV3Wt=jjFzhC=G+LOc9TDA@mail.<span class="gmail-"><br>
>> <a href="http://gmail.com" rel="noreferrer" target="_blank">gmail.com</a>><br>
>> Content-Type: text/plain; charset="utf-8"<br>
>><br>
>> Hi,<br>
>><br></span><div><div class="gmail-h5">
>> We discussed this very issue in the Security API EG as well. In the<br>
>> Security API the actual type *MUST* be retained as per the spec<br>
>> definition.<br>
>><br>
>> The problem in CDI, at least in Weld, is that a proxy is injected. This<br>
>> happens via the build-in bean "PrincipalBean extends AbstractEEBean",<br>
>> where<br>
>> AbstractEEBean does:<br>
>><br>
>> public abstract class AbstractEEBean<T> extends<br>
>> AbstractStaticallyDecorableBui<wbr>ltInBean<T> {<br>
>><br>
>> private final T proxy;<br>
>><br>
>> protected AbstractEEBean(Class<T> type, Callable<T> callable,<br>
>> BeanManagerImpl beanManager) {<br>
>> super(beanManager, type);<br>
>> this.proxy = new ProxyFactory<T>(beanManager.ge<wbr>tContextId(),<br>
>> type,<br>
>> getTypes(), this).create(new EnterpriseTargetBeanInstance(t<wbr>ype, new<br>
>> CallableMethodHandler(callable<wbr>)));<br>
>> }<br>
>> // ...<br>
>> }<br>
>><br>
>> I'm not even sure if it's possible to downcast the proxy to the required<br>
>> runtime type.<br>
>><br>
>> Also note that the Principal can change during the request. The simplest<br>
>> case is when during an http request HttpServletRequest#logout is called.<br>
>><br>
>> Kind regards,<br>
>> Arjan Tijms<br>
>><br>
>><br>
>><br>
>><br>
>> On Wed, Apr 26, 2017 at 3:54 PM, John Ament <<a href="mailto:john.ament@spartasystems.com" target="_blank">john.ament@spartasystems.com</a><br>
>> ><br>
>> wrote:<br>
>><br>
>> > Hey guys<br>
>> ><br>
>> ><br>
>> > I raised a bug against the Weld guys, but think its worth an EG<br>
>> > discussion. When a Principal object is injected, the only type it has<br>
>> is<br>
>> > Principal. It does not retain the actual type used at runtime. This<br>
>> threw<br>
>> > me off on some Keycloak integration I'm working on (in $dayjob). So I<br>
>> was<br>
>> > wondering, is this expected from our POV or should it retain the types<br>
>> of<br>
>> > the actual runtime instance?<br>
>> ><br>
>> ><br>
>> > John<br>
>> ><br>
>> > ------------------------------<br>
>> > NOTICE: This e-mail message and any attachments may contain<br>
>> confidential,<br>
>> > proprietary, and/or privileged information which should be treated<br>
>> > accordingly. If you are not the intended recipient, please notify the<br>
>> > sender immediately by return e-mail, delete this message, and destroy<br>
>> all<br>
>> > physical and electronic copies. Thank you.<br>
>> ><br>
>> > ______________________________<wbr>_________________<br>
>> > cdi-dev mailing list<br>
>> > <a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a><br>
>> > <a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailma<wbr>n/listinfo/cdi-dev</a><br>
>> ><br>
>> > Note that for all code provided on this list, the provider licenses the<br></div></div><span class="gmail-">
>> > code under the Apache License, Version 2 (<a href="http://www.apache.org/" rel="noreferrer" target="_blank">http://www.apache.org/</a><br>
>> > licenses/LICENSE-2.0.html). For all other ideas provided on this list,<br>
>> > the provider waives all patent and other intellectual property rights<br>
>> > inherent in such information.<br>
>> ><br>
>> -------------- next part --------------<br>
>> An HTML attachment was scrubbed...<br>
>> URL: <a href="http://lists.jboss.org/pipermail/cdi-dev/attachments/2017042" rel="noreferrer" target="_blank">http://lists.jboss.org/piperma<wbr>il/cdi-dev/attachments/2017042</a><br></span>
>> 6/206ff811/attachment.html<span class="gmail-"><br>
>><br>
>> ------------------------------<br>
>><br>
>> ______________________________<wbr>_________________<br>
>> cdi-dev mailing list<br>
>> <a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a><br>
>> <a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailma<wbr>n/listinfo/cdi-dev</a><br>
>><br>
>> Note that for all code provided on this list, the provider licenses the<br></span><span class="gmail-">
>> code under the Apache License, Version 2 (<a href="http://www.apache.org/license" rel="noreferrer" target="_blank">http://www.apache.org/license</a><br>
>> s/LICENSE-2.0.html). For all other ideas provided on this list, the<br>
>> provider waives all patent and other intellectual property rights inherent<br>
>> in such information.<br>
>><br></span>
>> End of cdi-dev Digest, Vol 77, Issue 8<br>
>> ******************************<wbr>********<span class="gmail-"><br>
>><br>
><br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br></span>
URL: <a href="http://lists.jboss.org/pipermail/cdi-dev/attachments/20170426/ebea1962/attachment.html" rel="noreferrer" target="_blank">http://lists.jboss.org/piperma<wbr>il/cdi-dev/attachments/2017042<wbr>6/ebea1962/attachment.html</a><span class="gmail-"><br>
<br>
------------------------------<br>
<br>
______________________________<wbr>_________________<br>
cdi-dev mailing list<br>
<a href="mailto:cdi-dev@lists.jboss.org" target="_blank">cdi-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailma<wbr>n/listinfo/cdi-dev</a><br>
<br>
Note that for all code provided on this list, the provider licenses the code under the Apache License, Version 2 (<a href="http://www.apache.org/licenses/LICENSE-2.0.html" rel="noreferrer" target="_blank">http://www.apache.org/license<wbr>s/LICENSE-2.0.html</a>). For all other ideas provided on this list, the provider waives all patent and other intellectual property rights inherent in such information.<br>
<br></span>
End of cdi-dev Digest, Vol 77, Issue 10<br>
******************************<wbr>*********<br>
</blockquote></div><br></div></div></div>
<br>______________________________<wbr>_________________<br>
cdi-dev mailing list<br>
<a href="mailto:cdi-dev@lists.jboss.org">cdi-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/cdi-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/cdi-dev</a><br>
<br>
Note that for all code provided on this list, the provider licenses the code under the Apache License, Version 2 (<a href="http://www.apache.org/licenses/LICENSE-2.0.html" rel="noreferrer" target="_blank">http://www.apache.org/<wbr>licenses/LICENSE-2.0.html</a>). For all other ideas provided on this list, the provider waives all patent and other intellectual property rights inherent in such information.<br></blockquote></div><br></div></div>