]
Ingo Weiss updated WFCORE-4599:
-------------------------------
Git Pull Request:
Default AuthenticationContext is a static with undefined behaviour
------------------------------------------------------------------
Key: WFCORE-4599
URL:
https://issues.jboss.org/browse/WFCORE-4599
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Stuart Douglas
Assignee: Darran Lofthouse
Priority: Major
The default AuthenticationContext global supplier initializes a static based on
wildfly-config..xml found in the current class loader.
As this is initialised lazily the result of this will depend on which deployment is used
to access this first. If there are multiple deployments other deployments can end up using
the wrong configuration.