Ondrej Lukas created WFCORE-2724:
------------------------------------
Summary: Attribute protocol in authentication-configuration of Elytron
subsystem is not used
Key: WFCORE-2724
URL:
https://issues.jboss.org/browse/WFCORE-2724
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Ondrej Lukas
Assignee: Darran Lofthouse
Priority: Blocker
When authentication-configuration in Elytron subsystem uses attribute {{protocol}} then
value of this attribute is not used for outgoing connection. Attributes {{host}} and
{{port}} are used correctly.
Following authentication-configuration of Elytron subsystem should use URL
{{remote+http://localhost:9990}} for outgoing connection, but protocol {{remote+http}}
from {{protocol}} is not used:
{code}
<authentication-configuration name="authConfig"
authentication-name="admin" protocol="remote+http"
host="localhost" port="9990">
<credential-reference clear-text="pass@123"/>
</authentication-configuration>
{code}
We request blocker because this issue blocks feature for RFE EAP7-568. Due to issue
incorrect protocol can be unexpectedly used for outgoing connection, e.g. http can be used
instead of https.
This issue is blocker for GA, not for testing.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)