[JBoss JIRA] (WFLY-11015) Remove the javax.json modules which are included by WildFly Core
by James Perkins (JIRA)
[ https://issues.jboss.org/browse/WFLY-11015?page=com.atlassian.jira.plugin... ]
James Perkins updated WFLY-11015:
---------------------------------
Summary: Remove the javax.json modules which are included by WildFly Core (was: Remove the javax.json modules which are included by WildFly COre)
> Remove the javax.json modules which are included by WildFly Core
> ----------------------------------------------------------------
>
> Key: WFLY-11015
> URL: https://issues.jboss.org/browse/WFLY-11015
> Project: WildFly
> Issue Type: Task
> Components: EE
> Reporter: James Perkins
> Assignee: James Perkins
>
> WildFly Core includes the javax.json API and implementation modules. These were also included in WildFly as part of the Java EE 8 tech preview. Now that WildFly Core is using the Java EE 8 specification versions we can remove the modules from WildFly itself.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months
[JBoss JIRA] (WFLY-11015) Remove the javax.json modules which are included by WildFly COre
by James Perkins (JIRA)
James Perkins created WFLY-11015:
------------------------------------
Summary: Remove the javax.json modules which are included by WildFly COre
Key: WFLY-11015
URL: https://issues.jboss.org/browse/WFLY-11015
Project: WildFly
Issue Type: Task
Components: EE
Reporter: James Perkins
Assignee: James Perkins
WildFly Core includes the javax.json API and implementation modules. These were also included in WildFly as part of the Java EE 8 tech preview. Now that WildFly Core is using the Java EE 8 specification versions we can remove the modules from WildFly itself.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months
[JBoss JIRA] (WFLY-11014) Ensure the org.apache.geronimo.specs are explicitly excluded
by James Perkins (JIRA)
James Perkins created WFLY-11014:
------------------------------------
Summary: Ensure the org.apache.geronimo.specs are explicitly excluded
Key: WFLY-11014
URL: https://issues.jboss.org/browse/WFLY-11014
Project: WildFly
Issue Type: Task
Components: Build System
Reporter: James Perkins
Assignee: James Perkins
Some dependencies are bringing in dependencies on {{org.apache.geronimo.specs:*}} specs. These should be excluded in favor of using the specs defined by WildFly.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months
[JBoss JIRA] (WFLY-11013) Hash encoding Exception when using @DatabaseIdentityStoreDefinition
by Francesco Marchioni (JIRA)
[ https://issues.jboss.org/browse/WFLY-11013?page=com.atlassian.jira.plugin... ]
Francesco Marchioni edited comment on WFLY-11013 at 9/13/18 12:13 PM:
----------------------------------------------------------------------
[~mchoma] I've used:
{code:java}
echo -n "admin" | openssl dgst -md5 -binary | openssl base64
ISMvKXpXpadDiUoOSoAfww==
update USERS set password = 'ISMvKXpXpadDiUoOSoAfww==' where login = 'admin';
{code}
I could try with pbkdf2PasswordHash.generate("HelloWorld".toCharArray()) instead even if the issue appears to be related to the hash defined in @DatabaseIdentityStoreDefinition.
was (Author: f_marchioni):
[~mchoma] I've used:
{code:java}
echo -n "admin" | openssl dgst -md5 -binary | openssl base64
ISMvKXpXpadDiUoOSoAfww==
{code}
I could try with pbkdf2PasswordHash.generate("HelloWorld".toCharArray()) instead even if the issue appears to be related to the hash defined in @DatabaseIdentityStoreDefinition.
> Hash encoding Exception when using @DatabaseIdentityStoreDefinition
> -------------------------------------------------------------------
>
> Key: WFLY-11013
> URL: https://issues.jboss.org/browse/WFLY-11013
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 14.0.0.Final
> Environment: WildFly 14. Generic Linux. JDK 8/9
> Reporter: Francesco Marchioni
> Assignee: Darran Lofthouse
> Attachments: javaee8-secure-servlet.zip
>
>
> When deploying one application using @DatabaseIdentityStoreDefinition, upon successful login, the following exception is thrown
> {code:java}
> java.lang.IllegalArgumentException: Bad hash encoding
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.decode(Pbkdf2PasswordHashImpl.java:209)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.<init>(Pbkdf2PasswordHashImpl.java:191)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl.verify(Pbkdf2PasswordHashImpl.java:147)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:121)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:101)
> at org.jboss.weldx.security.enterprise.identitystore.IdentityStore$635317201$Proxy$_$$_WeldClientProxy.validate(Unknown Source)
> at org.glassfish.soteria.cdi.DefaultIdentityStoreHandler.validate(DefaultIdentityStoreHandler.java:97)
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months
[JBoss JIRA] (WFLY-6415) Deprecate org.jboss.as.clustering.infinispan.subsystem.ScheduledThreadPoolResourceDefinition#keepAliveTime since it has no valid meaning
by Radoslav Husar (JIRA)
[ https://issues.jboss.org/browse/WFLY-6415?page=com.atlassian.jira.plugin.... ]
Radoslav Husar updated WFLY-6415:
---------------------------------
Issue Type: Task (was: Bug)
> Deprecate org.jboss.as.clustering.infinispan.subsystem.ScheduledThreadPoolResourceDefinition#keepAliveTime since it has no valid meaning
> ----------------------------------------------------------------------------------------------------------------------------------------
>
> Key: WFLY-6415
> URL: https://issues.jboss.org/browse/WFLY-6415
> Project: WildFly
> Issue Type: Task
> Components: Clustering
> Affects Versions: 10.0.0.Final
> Reporter: Radoslav Husar
> Assignee: Paul Ferraro
>
> {code}
> * <p>While this class inherits from {@link ThreadPoolExecutor}, a few
> * of the inherited tuning methods are not useful for it. In
> * particular, because it acts as a fixed-sized pool using
> * {@code corePoolSize} threads and an unbounded queue, adjustments
> * to {@code maximumPoolSize} have no useful effect. Additionally, it
> * is almost never a good idea to set {@code corePoolSize} to zero or
> * use {@code allowCoreThreadTimeOut} because this may leave the pool
> * without threads to handle tasks once they become eligible to run.
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months
[JBoss JIRA] (WFLY-11013) Hash encoding Exception when using @DatabaseIdentityStoreDefinition
by Francesco Marchioni (JIRA)
[ https://issues.jboss.org/browse/WFLY-11013?page=com.atlassian.jira.plugin... ]
Francesco Marchioni commented on WFLY-11013:
--------------------------------------------
[~mchoma] I've used:
{code:java}
echo -n "admin" | openssl dgst -md5 -binary | openssl base64
ISMvKXpXpadDiUoOSoAfww==
{code}
I could try with pbkdf2PasswordHash.generate("HelloWorld".toCharArray()) instead even if the issue appears to be related to the hash defined in @DatabaseIdentityStoreDefinition.
> Hash encoding Exception when using @DatabaseIdentityStoreDefinition
> -------------------------------------------------------------------
>
> Key: WFLY-11013
> URL: https://issues.jboss.org/browse/WFLY-11013
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 14.0.0.Final
> Environment: WildFly 14. Generic Linux. JDK 8/9
> Reporter: Francesco Marchioni
> Assignee: Darran Lofthouse
> Attachments: javaee8-secure-servlet.zip
>
>
> When deploying one application using @DatabaseIdentityStoreDefinition, upon successful login, the following exception is thrown
> {code:java}
> java.lang.IllegalArgumentException: Bad hash encoding
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.decode(Pbkdf2PasswordHashImpl.java:209)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.<init>(Pbkdf2PasswordHashImpl.java:191)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl.verify(Pbkdf2PasswordHashImpl.java:147)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:121)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:101)
> at org.jboss.weldx.security.enterprise.identitystore.IdentityStore$635317201$Proxy$_$$_WeldClientProxy.validate(Unknown Source)
> at org.glassfish.soteria.cdi.DefaultIdentityStoreHandler.validate(DefaultIdentityStoreHandler.java:97)
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months
[JBoss JIRA] (WFLY-11013) Hash encoding Exception when using @DatabaseIdentityStoreDefinition
by Martin Choma (JIRA)
[ https://issues.jboss.org/browse/WFLY-11013?page=com.atlassian.jira.plugin... ]
Martin Choma edited comment on WFLY-11013 at 9/13/18 12:00 PM:
---------------------------------------------------------------
Can you show us how is your password saved in DB?
You can use {{pbkdf2PasswordHash.generate("HelloWorld".toCharArray())}} to generate string for DB as explained in https://rieckpil.de/howto-jax-rs-user-based-rate-limiting-with-jsr-375/
was (Author: mchoma):
Can you show us how is your password saved in DB?
> Hash encoding Exception when using @DatabaseIdentityStoreDefinition
> -------------------------------------------------------------------
>
> Key: WFLY-11013
> URL: https://issues.jboss.org/browse/WFLY-11013
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 14.0.0.Final
> Environment: WildFly 14. Generic Linux. JDK 8/9
> Reporter: Francesco Marchioni
> Assignee: Darran Lofthouse
> Attachments: javaee8-secure-servlet.zip
>
>
> When deploying one application using @DatabaseIdentityStoreDefinition, upon successful login, the following exception is thrown
> {code:java}
> java.lang.IllegalArgumentException: Bad hash encoding
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.decode(Pbkdf2PasswordHashImpl.java:209)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.<init>(Pbkdf2PasswordHashImpl.java:191)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl.verify(Pbkdf2PasswordHashImpl.java:147)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:121)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:101)
> at org.jboss.weldx.security.enterprise.identitystore.IdentityStore$635317201$Proxy$_$$_WeldClientProxy.validate(Unknown Source)
> at org.glassfish.soteria.cdi.DefaultIdentityStoreHandler.validate(DefaultIdentityStoreHandler.java:97)
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months
[JBoss JIRA] (WFLY-11013) Hash encoding Exception when using @DatabaseIdentityStoreDefinition
by Martin Choma (JIRA)
[ https://issues.jboss.org/browse/WFLY-11013?page=com.atlassian.jira.plugin... ]
Martin Choma commented on WFLY-11013:
-------------------------------------
Can you show us how is your password saved in DB?
> Hash encoding Exception when using @DatabaseIdentityStoreDefinition
> -------------------------------------------------------------------
>
> Key: WFLY-11013
> URL: https://issues.jboss.org/browse/WFLY-11013
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 14.0.0.Final
> Environment: WildFly 14. Generic Linux. JDK 8/9
> Reporter: Francesco Marchioni
> Assignee: Darran Lofthouse
> Attachments: javaee8-secure-servlet.zip
>
>
> When deploying one application using @DatabaseIdentityStoreDefinition, upon successful login, the following exception is thrown
> {code:java}
> java.lang.IllegalArgumentException: Bad hash encoding
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.decode(Pbkdf2PasswordHashImpl.java:209)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.<init>(Pbkdf2PasswordHashImpl.java:191)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl.verify(Pbkdf2PasswordHashImpl.java:147)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:121)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:101)
> at org.jboss.weldx.security.enterprise.identitystore.IdentityStore$635317201$Proxy$_$$_WeldClientProxy.validate(Unknown Source)
> at org.glassfish.soteria.cdi.DefaultIdentityStoreHandler.validate(DefaultIdentityStoreHandler.java:97)
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months
[JBoss JIRA] (WFLY-11013) Hash encoding Exception when using @DatabaseIdentityStoreDefinition
by Francesco Marchioni (JIRA)
[ https://issues.jboss.org/browse/WFLY-11013?page=com.atlassian.jira.plugin... ]
Francesco Marchioni commented on WFLY-11013:
--------------------------------------------
[~msvehla] I have updated the reproducer to use a password hash like:
{code:java}
@DatabaseIdentityStoreDefinition(dataSourceLookup = "java:/MySqlDS", callerQuery = "select password from USERS where login=?", groupsQuery = "select role, 'Roles' from USERS where login=?", hashAlgorithm = Pbkdf2PasswordHash.class, priorityExpression = "#{100}", hashAlgorithmParameters = {
"Pbkdf2PasswordHash.Iterations=3072", "${applicationConfig.dyna}" })
@ApplicationScoped
@Named
public class ApplicationConfig {
public String[] getDyna() {
return new String[] { "Pbkdf2PasswordHash.Algorithm=PBKDF2WithHmacSHA256",
"Pbkdf2PasswordHash.SaltSizeBytes=64" };
}
{code}
I've updated the password on the DB too with a hashed password but the error remains.
> Hash encoding Exception when using @DatabaseIdentityStoreDefinition
> -------------------------------------------------------------------
>
> Key: WFLY-11013
> URL: https://issues.jboss.org/browse/WFLY-11013
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 14.0.0.Final
> Environment: WildFly 14. Generic Linux. JDK 8/9
> Reporter: Francesco Marchioni
> Assignee: Darran Lofthouse
> Attachments: javaee8-secure-servlet.zip
>
>
> When deploying one application using @DatabaseIdentityStoreDefinition, upon successful login, the following exception is thrown
> {code:java}
> java.lang.IllegalArgumentException: Bad hash encoding
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.decode(Pbkdf2PasswordHashImpl.java:209)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.<init>(Pbkdf2PasswordHashImpl.java:191)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl.verify(Pbkdf2PasswordHashImpl.java:147)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:121)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:101)
> at org.jboss.weldx.security.enterprise.identitystore.IdentityStore$635317201$Proxy$_$$_WeldClientProxy.validate(Unknown Source)
> at org.glassfish.soteria.cdi.DefaultIdentityStoreHandler.validate(DefaultIdentityStoreHandler.java:97)
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months
[JBoss JIRA] (WFLY-11013) Hash encoding Exception when using @DatabaseIdentityStoreDefinition
by Francesco Marchioni (JIRA)
[ https://issues.jboss.org/browse/WFLY-11013?page=com.atlassian.jira.plugin... ]
Francesco Marchioni updated WFLY-11013:
---------------------------------------
Attachment: (was: javaee8-secure-servlet.zip)
> Hash encoding Exception when using @DatabaseIdentityStoreDefinition
> -------------------------------------------------------------------
>
> Key: WFLY-11013
> URL: https://issues.jboss.org/browse/WFLY-11013
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 14.0.0.Final
> Environment: WildFly 14. Generic Linux. JDK 8/9
> Reporter: Francesco Marchioni
> Assignee: Darran Lofthouse
> Attachments: javaee8-secure-servlet.zip
>
>
> When deploying one application using @DatabaseIdentityStoreDefinition, upon successful login, the following exception is thrown
> {code:java}
> java.lang.IllegalArgumentException: Bad hash encoding
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.decode(Pbkdf2PasswordHashImpl.java:209)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.<init>(Pbkdf2PasswordHashImpl.java:191)
> at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl.verify(Pbkdf2PasswordHashImpl.java:147)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:121)
> at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:101)
> at org.jboss.weldx.security.enterprise.identitystore.IdentityStore$635317201$Proxy$_$$_WeldClientProxy.validate(Unknown Source)
> at org.glassfish.soteria.cdi.DefaultIdentityStoreHandler.validate(DefaultIdentityStoreHandler.java:97)
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 10 months