Alessio Soldano created WFLY-10480:
--------------------------------------
Summary: ElytronSecurityDomainContextImpl does not propagate authenticated
subject
Key: WFLY-10480
URL:
https://issues.jboss.org/browse/WFLY-10480
Project: WildFly
Issue Type: Bug
Reporter: Alessio Soldano
Assignee: Jim Ma
Fix For: 14.0.0.CR1
We have a usecase scenario which requires ElytronSecurityDomainContextImpl to propagate
the authenticated subject from webservice subsystem to
ejb subystem. With old security domain , we used to rely on the following integration code
in the SecurityDomainContextImpl:
@Override
public void pushSubjectContext(final Subject subject, final Principal principal, final
Object credential) {
AccessController.doPrivileged(new PrivilegedAction<Void>() {
public Void run() {
SecurityContext securityContext =
SecurityContextAssociation.getSecurityContext();
if (securityContext == null) {
securityContext = createSecurityContext(getSecurityDomain());
setSecurityContextOnAssociation(securityContext);
}
securityContext.getUtil().createSubjectInfo(principal, credential, subject);
return null;
}
});
}
When an Elytron security domain is configured for the ws application, the functionality is
not working as the corresponding method in ElytronSecurityDomainContextImpl is empty.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)