[JBoss JIRA] (WFLY-12537) Incoming RunAsPrincipal is not being propagated to an unsecured EJB
by James Perkins (Jira)
[ https://issues.redhat.com/browse/WFLY-12537?page=com.atlassian.jira.plugi... ]
James Perkins updated WFLY-12537:
---------------------------------
Fix Version/s: 19.0.0.Beta2
(was: 19.0.0.Beta1)
> Incoming RunAsPrincipal is not being propagated to an unsecured EJB
> -------------------------------------------------------------------
>
> Key: WFLY-12537
> URL: https://issues.redhat.com/browse/WFLY-12537
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Diana Vilkolakova
> Assignee: Diana Vilkolakova
> Priority: Major
> Fix For: 19.0.0.Beta2
>
>
> This is a follow-up on WFLY-11604. When Elytron is activated, run-as-principal identity is not being propagated the same way it was for legacy. For JBEAP-9744, we updated EJBContext.getCallerPrincipal() so that when called from an unsecured bean with no incoming runas identity, an `anonymous` principal will be returned. The issue WFLY-11604 discovered that EJBContext.getCallerPrincipal is returning 'anonymous' when called on an unsecured EJB even when incoming RunAsPrincipal identity should have been propagated. This issue is to see whether this can be fixed without breaking the fix for JBEAP-9744.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years, 3 months
[JBoss JIRA] (WFLY-12949) Upgrade WildFly-Http-Client from 1.0.18.final to 1.0.20.Final
by James Perkins (Jira)
[ https://issues.redhat.com/browse/WFLY-12949?page=com.atlassian.jira.plugi... ]
James Perkins updated WFLY-12949:
---------------------------------
Fix Version/s: 19.0.0.Beta2
(was: 19.0.0.Beta1)
> Upgrade WildFly-Http-Client from 1.0.18.final to 1.0.20.Final
> -------------------------------------------------------------
>
> Key: WFLY-12949
> URL: https://issues.redhat.com/browse/WFLY-12949
> Project: WildFly
> Issue Type: Component Upgrade
> Components: EJB
> Reporter: Richard Opalka
> Assignee: Richard Opalka
> Priority: Major
> Fix For: 19.0.0.Beta2
>
>
> This component upgrade incorporates:
>
> Bug fixes:
> * [WEJBHTTP-31] Notify waiters when WildflyClientInputStream read listener reads 0 regardless of whether pooled.getBuffer().hasRemaining() returns true or false
> * [WEJBHTTP-32] Remove duplicate notifyAll invocation from WildflyClientInputStream read listener
>
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years, 3 months