[JBoss JIRA] (WFLY-9344) Let Infinispan manage eviction for distributed web sessions and @Stateful EJBs
by Jason Greene (JIRA)
[ https://issues.jboss.org/browse/WFLY-9344?page=com.atlassian.jira.plugin.... ]
Jason Greene updated WFLY-9344:
-------------------------------
Fix Version/s: 12.0.0.Final
(was: 12.0.0.CR1)
> Let Infinispan manage eviction for distributed web sessions and @Stateful EJBs
> ------------------------------------------------------------------------------
>
> Key: WFLY-9344
> URL: https://issues.jboss.org/browse/WFLY-9344
> Project: WildFly
> Issue Type: Enhancement
> Components: Clustering
> Affects Versions: 11.0.0.CR1
> Reporter: Paul Ferraro
> Assignee: Paul Ferraro
> Fix For: 12.0.0.Final
>
>
> With Infinispan's transition to Caffeine to implement its data container, WF should finally be able to offload eviction to Infinispan, by configuring caffeine to use a specific Weigher that returns 0 for non-primary session entries, where max-active-sessions is configured as the maximumWeight. From an Infinispan configuration perspective, this corresponds to a custom EntrySizeCalculator that returns 0 for non-primary session entries, and a maxSize equal to the max-active-sessions. The remaining entries would rely on cascading eviction (i.e. manually evicting from a via passivation callback).
> As of Infinispan 9.1, the requisite DataContainer configuration attributes are deprecated - thus we need to lobby to expose the mechanisms for overriding the entry size calculator to be able to ensure this solution will be supported in the future.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 8 months
[JBoss JIRA] (WFLY-9561) HttpServletRequest.login(username, password) not creating HttpSession if it doesn't already exist. (Elytron)
by Jason Greene (JIRA)
[ https://issues.jboss.org/browse/WFLY-9561?page=com.atlassian.jira.plugin.... ]
Jason Greene updated WFLY-9561:
-------------------------------
Fix Version/s: 12.0.0.Final
(was: 12.0.0.CR1)
> HttpServletRequest.login(username, password) not creating HttpSession if it doesn't already exist. (Elytron)
> ------------------------------------------------------------------------------------------------------------
>
> Key: WFLY-9561
> URL: https://issues.jboss.org/browse/WFLY-9561
> Project: WildFly
> Issue Type: Bug
> Components: Security, Web (Undertow)
> Affects Versions: 11.0.0.Final
> Reporter: Stanislav Grushevskiy
> Assignee: Darran Lofthouse
> Fix For: 12.0.0.Final
>
> Attachments: test.zip
>
>
> If Elytron security domain (in WildFly 11, default "standalone.xml") is used for programmatic login, cookie "JSESSIONID" is not set in response. So following requests are sent without "JSESSIONID".
> @Path("login")
> public class LoginService {
> @Context
> private HttpServletRequest request;
> @POST
> public void login(LoginForm form) throws ServletException {
> request.login(form.getLogin(), form.getPassword());
> }
> }
> <?xml version="1.0" encoding="UTF-8"?>
> <jboss-web>
> <security-domain>application-security-domain</security-domain>
> </jboss-web>
> If I add manual interaction with Session in login method, "JSESSIONID" is set.
> OR
> If I delete "jboss-web.xml" and default old "ApplicationRealm" is used, "JSESSIONID" is set.
> "JSESSIONID" is set in WildFly 10.0.0.Final and in 10.1.0.Final, because there is no Elytron there and "ApplicationRealm" is used.
> Test project is attached, create application user (add-user.sh) with username "wildfly" and password "wildfly".
> Run "mvn wildfly:deploy".
> Go to http://localhost:8080/test/test.html and press "Login" button and then "Check Auth".
> In this project you can uncomment code below (// uncomment the row below to get it working with elytron) to add session interaction or comment code below (<!-- comment the row below to use default ApplicationRealm from old security system, not elytron -->) to use old "ApplicationRealm".
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 8 months
[JBoss JIRA] (WFLY-9489) Remove need for application-security-domain mapping
by Jason Greene (JIRA)
[ https://issues.jboss.org/browse/WFLY-9489?page=com.atlassian.jira.plugin.... ]
Jason Greene updated WFLY-9489:
-------------------------------
Fix Version/s: 12.0.0.Final
(was: 12.0.0.CR1)
> Remove need for application-security-domain mapping
> ---------------------------------------------------
>
> Key: WFLY-9489
> URL: https://issues.jboss.org/browse/WFLY-9489
> Project: WildFly
> Issue Type: Feature Request
> Components: Web (Undertow)
> Affects Versions: 11.0.0.Final
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Fix For: 12.0.0.Final
>
>
> The application-security-domain resource was added to map from the security domain specified within the deployment to a WildFly Elytron authentication factory with some additional related configuration.
> It should be possible to define all of this within a deployment descriptor.
> Additionally the subsystem includes a default-security-domain attribute, it should likely contain some default Elytron configuration options.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 8 months