]
David Lloyd resolved ELY-496.
-----------------------------
Resolution: Rejected
I think it has become apparent that we don't actually need this capability.
Support for JAAS Subject inclusion in SecurityIdentity (via
PeerIdentity)
-------------------------------------------------------------------------
Key: ELY-496
URL:
https://issues.jboss.org/browse/ELY-496
Project: WildFly Elytron
Issue Type: Enhancement
Components: API / SPI
Reporter: David Lloyd
We will probably need a way to configure a security domain to associate an legacy JAAS
Subject to a SecurityIdentity. This would fit with the existing capabilities of
associating a PeerIdentity to the SecurityIdentity, and transforming the
SecurityIdentity.
However the way that PeerIdentity performs associations is with a before and after call.
We need to support another mechanism that can use e.g. a function to wrap, because the
only way to associate a Subject in JAAS is to create an AccessControlContext with a
SubjectDomainCombiner, and to associate an AccessControlContext one must use doPrivileged.