[jboss-jira] [JBoss JIRA] Created: (JBAS-5549) security principal not persisted between requests when using WebAuthentication

security principal not persisted between requests when using WebAuthentication ------------------------------------------------------------------------------ Key: JBAS-5549 URL: http://jira.jboss.com/jira/browse/JBAS-5549 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Security Affects Versions: JBossAS-4.2.2.GA Reporter: Marcin Gryszko Assigned To: Anil Saldhana Priority: Minor If WebAuthentication is used and no security-constraint is defined in web.xml, the principal is not retained between requests. The code snippet performing the authentication is almost the same as in the wiki: WebAuthentication webAuth = new WebAuthentication(); webAuth.login(username, password); System.out.println(request.getUserPrincipal()); The call to request.getUserPrincipal() gives back the correct user name. When I access the web application for the second time, a call to request.getUserPrincipal() returns null. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira