[jboss-jira] [JBoss JIRA] (SECURITY-696) MessageFactory: Fallback to load classes from current class classloader if tccl failed

MessageFactory: Fallback to load classes from current class classloader if tccl failed -------------------------------------------------------------------------------------- Key: SECURITY-696 URL: https://issues.jboss.org/browse/SECURITY-696 Project: PicketBox (JBoss Security and Identity Management) Issue Type: Enhancement Security Level: Public(Everyone can see) Components: Negotiation Affects Versions: Negotiation_2_2_1 Environment: negotiation 2.2.1.Final, JBoss AS 7.1.2, GateIn portal Reporter: Marek Posolda Assignee: Darran Lofthouse Priority: Minor Attachments: SECURITY-696.patch Currently method MessageFactory.loadClass(String classname) has possibility to load classes only from Thread context classloader (Thread.currentThread().getContextClassLoader()). It could be nice if there is possibility to load classes from different classloader if TCCL failed. The best would be likely classloader of current class MessageFactory (MessageFactory.class.getClassLoader()) because libraries jboss-negotiation-common and jboss-negotiation-spnego are almost always loaded by same classloader (In JBoss AS7, they are part of same module). This enhancement could be helpful for example in GateIn portal integration, as we have custom NegotiationAuthenticator in different module and so we don't need to explicitly mention additional module "org.jboss.security.negotiation" in dependencies of gatein.ear/META-INF/MANIFEST.MF