[JBoss JIRA] (WFCORE-4959) Feature for checking module installation in JBoss
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/WFCORE-4959?page=com.atlassian.jira.plug... ]
Darran Lofthouse commented on WFCORE-4959:
------------------------------------------
This would be quite a big change, the module --add command within the CLI just operates on the local filesystem and writes the module directly, once you start talking about domain mode this converts this to more of a management level operation to distribute an operation across the host controllers.
Once talking about the host controllers you can identify the currently running host controllers but if you wanted to target the ones not presently running / the ones to run in the the future tracking those becomes more complex.
I have also in the past wondered if we could so something where if a slave does not have a module requested it tries to pull it from the master which would save the coordination of a command like this but potentially brings in new problems such as mixed domains where different versions of modules are required or modules with optional dependencies where the missing module is intended.
> Feature for checking module installation in JBoss
> -------------------------------------------------
>
> Key: WFCORE-4959
> URL: https://issues.redhat.com/browse/WFCORE-4959
> Project: WildFly Core
> Issue Type: Feature Request
> Reporter: Joao Paulo Goncalves
> Assignee: Brian Stansberry
> Priority: Major
>
> Using CLI tool or Administrative Console is not possible at this moment to check if a custom added module was added correctly, especially in domain mode. The only alternative available is to add host per host. This approach takes time, and for unused users there isn't some visual (GUI) to help them.
> JBoss CLI approach:
> module --add --source=jar1,jar2 --target=/path-of-module --host=your-host OR module --add --source=jar1,jar2 --target=/path-of-module --host=all (deploy the module in all hosts that belongs to the domain)
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years
[JBoss JIRA] (WFCORE-4959) Feature for checking module installation in JBoss
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/WFCORE-4959?page=com.atlassian.jira.plug... ]
Darran Lofthouse moved WFLY-13430 to WFCORE-4959:
-------------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-4959 (was: WFLY-13430)
> Feature for checking module installation in JBoss
> -------------------------------------------------
>
> Key: WFCORE-4959
> URL: https://issues.redhat.com/browse/WFCORE-4959
> Project: WildFly Core
> Issue Type: Feature Request
> Reporter: Joao Paulo Goncalves
> Assignee: Brian Stansberry
> Priority: Major
>
> Using CLI tool or Administrative Console is not possible at this moment to check if a custom added module was added correctly, especially in domain mode. The only alternative available is to add host per host. This approach takes time, and for unused users there isn't some visual (GUI) to help them.
> JBoss CLI approach:
> module --add --source=jar1,jar2 --target=/path-of-module --host=your-host OR module --add --source=jar1,jar2 --target=/path-of-module --host=all (deploy the module in all hosts that belongs to the domain)
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years
[JBoss JIRA] (WFLY-13319) Wildfly 19 MP-JWT & EJB Integration
by Radu Cimpean (Jira)
[ https://issues.redhat.com/browse/WFLY-13319?page=com.atlassian.jira.plugi... ]
Radu Cimpean commented on WFLY-13319:
-------------------------------------
Cheers, [~dlofthouse]. Thanks for both the stack and for looking into it. Looking forward to the support being added.
All the best, stay safe.
> Wildfly 19 MP-JWT & EJB Integration
> -----------------------------------
>
> Key: WFLY-13319
> URL: https://issues.redhat.com/browse/WFLY-13319
> Project: WildFly
> Issue Type: Feature Request
> Components: EJB, MP JWT, Test Suite
> Affects Versions: 19.0.0.Final
> Reporter: Radu Cimpean
> Assignee: Darran Lofthouse
> Priority: Major
> Fix For: 20.0.0.Beta1
>
> Attachments: server-cli.txt, web.xml
>
>
> ===Previous configuration & situation===
> As written https://groups.google.com/forum/#!topic/wildfly/L1BxATschCU,
> We were running wildfly 18 and used jwt for securing the application. We did this via a series of cli commands (see server-cli.txt) to configure the server, as well as referencing the created domains in the web.xml.
> Under jboss-web.xml we are referencing the "ejb-domain" created in the CLIs. The web.xml (see attachments) protects the resource wit the role referenced in the CLIs (role present in the token)
> All our jax-rs resources are annotated with @Stateless and are calling EJBs which in turn are @Statless and declare allowed roles.
> ===Current situation===
> We've upgraded to wildfly 19 in hopes of using microprofile jwt. To do this, we've annotated the Application class with
> @LoginConfig(authMethod = "MP-JWT", realmName = "MP-JWT-REALM"), removed the login-config from the web.xml, and removed the security-domain from jboss-web.xml (since otherwise I would receive an error: ELY01148: A SecurityDomain has already been associated with the specified ClassLoader").
> After also removing the security-constraint tag from the web.xml I was able to get to the resource and noticed that the JWTToken was properly injected (all claims and entries are there), and the SecurityContext injected in the resource also contained the jwt specific values. From what I can tell, in the context of the jax-rs classloader, I am authenticated.
> I would, however, always receive a "Invocation on method... is not allowed" the second the resource would try calling a bean, even if the role matched. Upon checking the logs, and what the injected SessionContext contained, I noticed the principal was anonymous and had no roles allowed.
> I therefore believe that the credentials are somehow not being properly passed.
> Is there a documented way of properly integrating jax-rs&ejb with microprofile jwt?
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years