August 2020 - jboss-jira - Jboss List Archives

[JBoss JIRA] (ELY-1725) Remove 'org.wildfly.security.credential.source.OAuth2CredentialSource'

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/ELY-1725?page=com.atlassian.jira.plugin.... ] Ashley Abdel-Sayed commented on ELY-1725: ----------------------------------------- My work for this issue can be found here https://github.com/ashley-abdelsayed98/wildfly-elytron/tree/ELY-1725 > Remove 'org.wildfly.security.credential.source.OAuth2CredentialSource' > ---------------------------------------------------------------------- > > Key: ELY-1725 > URL: https://issues.redhat.com/browse/ELY-1725 > Project: WildFly Elytron > Issue Type: Task > Reporter: Darran Lofthouse > Priority: Blocker > Fix For: 2.0.0.Alpha8 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-1724) Develop an alternative to 'org.wildfly.security.credential.source.OAuth2CredentialSource'

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/ELY-1724?page=com.atlassian.jira.plugin.... ] Ashley Abdel-Sayed commented on ELY-1724: ----------------------------------------- My work for this issue can be found here https://github.com/ashley-abdelsayed98/wildfly-elytron/tree/ELY-1724. This issue depends on ELY-1723; separating the `ElytronXmlParser` from the authentication client, otherwise moving `Oauth2CredentialSource` to a separate module results in a a circular dependency between the new module and auth.client module > Develop an alternative to 'org.wildfly.security.credential.source.OAuth2CredentialSource' > ----------------------------------------------------------------------------------------- > > Key: ELY-1724 > URL: https://issues.redhat.com/browse/ELY-1724 > Project: WildFly Elytron > Issue Type: Task > Reporter: Darran Lofthouse > Priority: Critical > Fix For: 1.13.0.CR4 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-1723) Separate auth client parsing from the API.

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/ELY-1723?page=com.atlassian.jira.plugin.... ] Ashley Abdel-Sayed commented on ELY-1723: ----------------------------------------- My work for this issue can be found here: https://github.com/ashley-abdelsayed98/wildfly-elytron/tree/ELY-1723. I was unable to work out how to separate `ElytronXmlParser` into a separate module while not changing the visibility of some private and package private functions in the authentication client. > Separate auth client parsing from the API. > ------------------------------------------ > > Key: ELY-1723 > URL: https://issues.redhat.com/browse/ELY-1723 > Project: WildFly Elytron > Issue Type: Task > Components: Authentication Client > Reporter: Darran Lofthouse > Priority: Blocker > Fix For: 1.13.0.CR4 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

[JBoss JIRA] (WFLY-12836) Large allocations in EJBContextImpl#isCallerInRole

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/WFLY-12836?page=com.atlassian.jira.plugi... ] Ashley Abdel-Sayed commented on WFLY-12836: ------------------------------------------- Since it is the last day of my internship, I am unassigning myself from this issue. > Large allocations in EJBContextImpl#isCallerInRole > -------------------------------------------------- > > Key: WFLY-12836 > URL: https://issues.redhat.com/browse/WFLY-12836 > Project: WildFly > Issue Type: Bug > Components: EJB, Security > Affects Versions: 18.0.1.Final > Reporter: Philippe Marschall > Assignee: Ashley Abdel-Sayed > Priority: Major > Attachments: elytron_allocations_redacted.PNG, screenshot-1.png > > > In our application we have the need to know the roles of the current user. We would like to do this using Java / Jakarta EE APIs rather than rely on WildFly implementation classes. We do this by iterating over all roles, which we know statically, and calling {{EJBContext#isCallerInRole}} for each one. This seem to be a common technique, see [How to get user roles in a JSP / Servlet|https://stackoverflow.com/questions/344117/how-to-get-user-roles-...]. > That's about 100 roles for us. We were expecting that would be a lookup into a {{HashMap}} or similar with O(1) complexity and almost no allocations. > This however does not seem to be case as {{EJBContextImpl#isCallerInRole}} seems to do the role mapping for every call. This results in a large amount of allocations. In our case this completely dominates our allocation profile. See attached screenshot from JFR. -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

[JBoss JIRA] (WFLY-12836) Large allocations in EJBContextImpl#isCallerInRole

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/WFLY-12836?page=com.atlassian.jira.plugi... ] Ashley Abdel-Sayed reassigned WFLY-12836: ----------------------------------------- Assignee: (was: Ashley Abdel-Sayed) > Large allocations in EJBContextImpl#isCallerInRole > -------------------------------------------------- > > Key: WFLY-12836 > URL: https://issues.redhat.com/browse/WFLY-12836 > Project: WildFly > Issue Type: Bug > Components: EJB, Security > Affects Versions: 18.0.1.Final > Reporter: Philippe Marschall > Priority: Major > Attachments: elytron_allocations_redacted.PNG, screenshot-1.png > > > In our application we have the need to know the roles of the current user. We would like to do this using Java / Jakarta EE APIs rather than rely on WildFly implementation classes. We do this by iterating over all roles, which we know statically, and calling {{EJBContext#isCallerInRole}} for each one. This seem to be a common technique, see [How to get user roles in a JSP / Servlet|https://stackoverflow.com/questions/344117/how-to-get-user-roles-...]. > That's about 100 roles for us. We were expecting that would be a lookup into a {{HashMap}} or similar with O(1) complexity and almost no allocations. > This however does not seem to be case as {{EJBContextImpl#isCallerInRole}} seems to do the role mapping for every call. This results in a large amount of allocations. In our case this completely dominates our allocation profile. See attached screenshot from JFR. -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-1723) Separate auth client parsing from the API.

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/ELY-1723?page=com.atlassian.jira.plugin.... ] Ashley Abdel-Sayed commented on ELY-1723: ----------------------------------------- Since it is the last day of my internship, I am unassigning myself from this issue. > Separate auth client parsing from the API. > ------------------------------------------ > > Key: ELY-1723 > URL: https://issues.redhat.com/browse/ELY-1723 > Project: WildFly Elytron > Issue Type: Task > Components: Authentication Client > Reporter: Darran Lofthouse > Priority: Blocker > Fix For: 1.13.0.CR4 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-1724) Develop an alternative to 'org.wildfly.security.credential.source.OAuth2CredentialSource'

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/ELY-1724?page=com.atlassian.jira.plugin.... ] Ashley Abdel-Sayed reassigned ELY-1724: --------------------------------------- Assignee: (was: Ashley Abdel-Sayed) > Develop an alternative to 'org.wildfly.security.credential.source.OAuth2CredentialSource' > ----------------------------------------------------------------------------------------- > > Key: ELY-1724 > URL: https://issues.redhat.com/browse/ELY-1724 > Project: WildFly Elytron > Issue Type: Task > Reporter: Darran Lofthouse > Priority: Critical > Fix For: 1.13.0.CR4 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-1725) Remove 'org.wildfly.security.credential.source.OAuth2CredentialSource'

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/ELY-1725?page=com.atlassian.jira.plugin.... ] Ashley Abdel-Sayed commented on ELY-1725: ----------------------------------------- Since it is the last day of my internship, I am unassigning myself from this issue. > Remove 'org.wildfly.security.credential.source.OAuth2CredentialSource' > ---------------------------------------------------------------------- > > Key: ELY-1725 > URL: https://issues.redhat.com/browse/ELY-1725 > Project: WildFly Elytron > Issue Type: Task > Reporter: Darran Lofthouse > Assignee: Ashley Abdel-Sayed > Priority: Blocker > Fix For: 2.0.0.Alpha8 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-1725) Remove 'org.wildfly.security.credential.source.OAuth2CredentialSource'

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/ELY-1725?page=com.atlassian.jira.plugin.... ] Ashley Abdel-Sayed reassigned ELY-1725: --------------------------------------- Assignee: (was: Ashley Abdel-Sayed) > Remove 'org.wildfly.security.credential.source.OAuth2CredentialSource' > ---------------------------------------------------------------------- > > Key: ELY-1725 > URL: https://issues.redhat.com/browse/ELY-1725 > Project: WildFly Elytron > Issue Type: Task > Reporter: Darran Lofthouse > Priority: Blocker > Fix For: 2.0.0.Alpha8 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-1723) Separate auth client parsing from the API.

by Ashley Abdel-Sayed (Jira)

[ https://issues.redhat.com/browse/ELY-1723?page=com.atlassian.jira.plugin.... ] Ashley Abdel-Sayed reassigned ELY-1723: --------------------------------------- Assignee: (was: Ashley Abdel-Sayed) > Separate auth client parsing from the API. > ------------------------------------------ > > Key: ELY-1723 > URL: https://issues.redhat.com/browse/ELY-1723 > Project: WildFly Elytron > Issue Type: Task > Components: Authentication Client > Reporter: Darran Lofthouse > Priority: Blocker > Fix For: 1.13.0.CR4 > > -- This message was sent by Atlassian Jira (v7.13.8#713008)

5 years, 11 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira August 2020