[JBoss JIRA] Created: (JBPORTAL-2404) WSRP implementation does not executes getUserPrincipal() when the portlet is invoked remotely
10:50 p.m.
WSRP implementation does not executes getUserPrincipal() when the portlet is invoked
remotely
---------------------------------------------------------------------------------------------
Key: JBPORTAL-2404
URL: https://jira.jboss.org/jira/browse/JBPORTAL-2404
Project: JBoss Portal
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: Portal WSRP
Affects Versions: 2.7.2 Final
Environment: Red Hat Enterprise Linux 5
Reporter: Ricardo Ferreira
Assignee: Chris Laprun
The JBoss Portal implementation does not executes correctly API invocations related to the
principal retrieve from the portlet contêiner. When you executes a local portlet, the API
call "HttpServletRequest.getUserPrincipal()" works fine. But when you install
this same portlet in a remote portlet container using WSRP, the API call returns
"null".
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:25 p.m.
New subject: [JBoss JIRA] Updated: (JBPORTAL-2404) WSRP implementation does not executes getUserPrincipal() when the portlet is invoked remotely
[
https://jira.jboss.org/jira/browse/JBPORTAL-2404?page=com.atlassian.jira....
]
Ricardo Ferreira updated JBPORTAL-2404:
---------------------------------------
Attachment: JBH.ear
This is the EAR application that contains the Portlet used in the test. Just deploy this
portlet on JBoss Portal and try to register it as a remote Portlet using WSRP.
WSRP implementation does not executes getUserPrincipal() when the
portlet is invoked remotely
---------------------------------------------------------------------------------------------
Key: JBPORTAL-2404
URL: https://jira.jboss.org/jira/browse/JBPORTAL-2404
Project: JBoss Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Portal WSRP
Affects Versions: 2.7.2 Final
Environment: Red Hat Enterprise Linux 5
Reporter: Ricardo Ferreira
Assignee: Chris Laprun
Attachments: JBH.ear
The JBoss Portal implementation does not executes correctly API invocations related to
the principal retrieve from the portlet contêiner. When you executes a local portlet, the
API call "HttpServletRequest.getUserPrincipal()" works fine. But when you
install this same portlet in a remote portlet container using WSRP, the API call returns
"null".
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:59 p.m.
New subject: [JBoss JIRA] Commented: (JBPORTAL-2404) WSRP implementation does not executes getUserPrincipal() when the portlet is invoked remotely
[
https://jira.jboss.org/jira/browse/JBPORTAL-2404?page=com.atlassian.jira....
]
Chris Laprun commented on JBPORTAL-2404:
----------------------------------------
The reason why it currently returns null is because returning anything else that would
make sense in a secure context would require support for WS-Security. I could implement
something that would return a Principal matching the information provided by the
UserContext, however, there wouldn't be any security guarantees usually associated
with Principal...
WSRP implementation does not executes getUserPrincipal() when the
portlet is invoked remotely
---------------------------------------------------------------------------------------------
Key: JBPORTAL-2404
URL: https://jira.jboss.org/jira/browse/JBPORTAL-2404
Project: JBoss Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Portal WSRP
Affects Versions: 2.7.2 Final
Environment: Red Hat Enterprise Linux 5
Reporter: Ricardo Ferreira
Assignee: Chris Laprun
Attachments: JBH.ear
The JBoss Portal implementation does not executes correctly API invocations related to
the principal retrieve from the portlet contêiner. When you executes a local portlet, the
API call "HttpServletRequest.getUserPrincipal()" works fine. But when you
install this same portlet in a remote portlet container using WSRP, the API call returns
"null".
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:41 p.m.
New subject: [JBoss JIRA] Commented: (JBPORTAL-2404) WSRP implementation does not executes getUserPrincipal() when the portlet is invoked remotely
[
https://jira.jboss.org/jira/browse/JBPORTAL-2404?page=com.atlassian.jira....
]
Ricardo Ferreira commented on JBPORTAL-2404:
--------------------------------------------
On interesting thing that we've at Brazil founded, is the fact that when you call
getRemoteUser(), the principal name is returned!
WSRP implementation does not executes getUserPrincipal() when the
portlet is invoked remotely
---------------------------------------------------------------------------------------------
Key: JBPORTAL-2404
URL: https://jira.jboss.org/jira/browse/JBPORTAL-2404
Project: JBoss Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Portal WSRP
Affects Versions: 2.7.2 Final
Environment: Red Hat Enterprise Linux 5
Reporter: Ricardo Ferreira
Assignee: Chris Laprun
Attachments: JBH.ear
The JBoss Portal implementation does not executes correctly API invocations related to
the principal retrieve from the portlet contêiner. When you executes a local portlet, the
API call "HttpServletRequest.getUserPrincipal()" works fine. But when you
install this same portlet in a remote portlet container using WSRP, the API call returns
"null".
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:33 a.m.
New subject: [JBoss JIRA] Commented: (JBPORTAL-2404) WSRP implementation does not executes getUserPrincipal() when the portlet is invoked remotely
[
https://jira.jboss.org/jira/browse/JBPORTAL-2404?page=com.atlassian.jira....
]
Chris Laprun commented on JBPORTAL-2404:
----------------------------------------
This is on purpose. getRemoteUser returns the principal name but I didn't implement
getPrincipal because I didn't want to convey the idea that secure transport of user
authentication was implemented, which would most likely have been the case had
getPrincipal returned anything else other than null. Maybe getPrincipal should throw an
exception to convey that meaning better?
WSRP implementation does not executes getUserPrincipal() when the
portlet is invoked remotely
---------------------------------------------------------------------------------------------
Key: JBPORTAL-2404
URL: https://jira.jboss.org/jira/browse/JBPORTAL-2404
Project: JBoss Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Portal WSRP
Affects Versions: 2.7.2 Final
Environment: Red Hat Enterprise Linux 5
Reporter: Ricardo Ferreira
Assignee: Chris Laprun
Attachments: JBH.ear
The JBoss Portal implementation does not executes correctly API invocations related to
the principal retrieve from the portlet contêiner. When you executes a local portlet, the
API call "HttpServletRequest.getUserPrincipal()" works fine. But when you
install this same portlet in a remote portlet container using WSRP, the API call returns
"null".
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:30 p.m.
New subject: [JBoss JIRA] Commented: (JBPORTAL-2404) WSRP implementation does not executes getUserPrincipal() when the portlet is invoked remotely
[
https://jira.jboss.org/jira/browse/JBPORTAL-2404?page=com.atlassian.jira....
]
Marcus Moyses commented on JBPORTAL-2404:
-----------------------------------------
Maybe throwing an exception with a message explaining the situation makes more sense.
Simply returning null makes us wonder if we did anything wrong.
Just my two cents.
WSRP implementation does not executes getUserPrincipal() when the
portlet is invoked remotely
---------------------------------------------------------------------------------------------
Key: JBPORTAL-2404
URL: https://jira.jboss.org/jira/browse/JBPORTAL-2404
Project: JBoss Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Portal WSRP
Affects Versions: 2.7.2 Final
Environment: Red Hat Enterprise Linux 5
Reporter: Ricardo Ferreira
Assignee: Chris Laprun
Attachments: JBH.ear
The JBoss Portal implementation does not executes correctly API invocations related to
the principal retrieve from the portlet contêiner. When you executes a local portlet, the
API call "HttpServletRequest.getUserPrincipal()" works fine. But when you
install this same portlet in a remote portlet container using WSRP, the API call returns
"null".
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:21 p.m.
New subject: [JBoss JIRA] Updated: (JBPORTAL-2404) WSRP implementation does not executes getUserPrincipal() when the portlet is invoked remotely
[
https://jira.jboss.org/jira/browse/JBPORTAL-2404?page=com.atlassian.jira....
]
Marcus Moyses updated JBPORTAL-2404:
------------------------------------
Attachment: (was: JBH.ear)
WSRP implementation does not executes getUserPrincipal() when the
portlet is invoked remotely
---------------------------------------------------------------------------------------------
Key: JBPORTAL-2404
URL: https://jira.jboss.org/jira/browse/JBPORTAL-2404
Project: JBoss Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Portal WSRP
Affects Versions: 2.7.2 Final
Environment: Red Hat Enterprise Linux 5
Reporter: Ricardo Ferreira
Assignee: Chris Laprun
The JBoss Portal implementation does not executes correctly API invocations related to
the principal retrieve from the portlet contêiner. When you executes a local portlet, the
API call "HttpServletRequest.getUserPrincipal()" works fine. But when you
install this same portlet in a remote portlet container using WSRP, the API call returns
"null".
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:39 p.m.
New subject: [JBoss JIRA] Updated: (JBPORTAL-2404) WSRP implementation does not executes getUserPrincipal() when the portlet is invoked remotely
[
https://jira.jboss.org/jira/browse/JBPORTAL-2404?page=com.atlassian.jira....
]
Ricardo Ferreira updated JBPORTAL-2404:
---------------------------------------
Attachment: myPortlet.zip
In the file "myPortlet.zip" there is a web application that contains a portlet
to be used for tests the issue.
WSRP implementation does not executes getUserPrincipal() when the
portlet is invoked remotely
---------------------------------------------------------------------------------------------
Key: JBPORTAL-2404
URL: https://jira.jboss.org/jira/browse/JBPORTAL-2404
Project: JBoss Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Portal WSRP
Affects Versions: 2.7.2 Final
Environment: Red Hat Enterprise Linux 5
Reporter: Ricardo Ferreira
Assignee: Chris Laprun
Attachments: myPortlet.zip
The JBoss Portal implementation does not executes correctly API invocations related to
the principal retrieve from the portlet contêiner. When you executes a local portlet, the
API call "HttpServletRequest.getUserPrincipal()" works fine. But when you
install this same portlet in a remote portlet container using WSRP, the API call returns
"null".
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5720
days inactive
5722
days old
7 comments
3 participants
participants (3)
-
Chris Laprun (JIRA) -
Marcus Moyses (JIRA)
-
Ricardo Ferreira (JIRA)