]
Darran Lofthouse commented on WFLY-11604:
-----------------------------------------
On a separate point once Elytron is enabled I notice that also anonymous is returned even
when the EJBContext is called - this may need a closer look overall as I believe the RunAs
behaviour was looked at quite closely as Elytron was added to the EJB container.
[~fjuma] / [~flavia.rainone] I am continuing to look into the differences - not sure if
either of you have additional input as the correct behaviour?
Non-anonymous principal is not propagated from EJB context to CDI
bean
----------------------------------------------------------------------
Key: WFLY-11604
URL:
https://issues.jboss.org/browse/WFLY-11604
Project: WildFly
Issue Type: Bug
Components: CDI / Weld, Security
Affects Versions: 14.0.1.Final, 15.0.1.Final
Reporter: Nikoleta Žiaková
Assignee: Darran Lofthouse
Priority: Critical
This is a follow-up on WFLY-11587 which only dealt with being able to inject the
principal.
However, during testing I have tried a scenario when the caller principal was not
anonymous (run-as-principal setting in jboss-ejb3.xml). See the test case in this
[
commit|https://github.com/nziakova/wildfly/commit/9ae586ad0159e6399f65103...].
The principal is not propagated from the EJB context. The result is that injected
principal in the CDI bean is always anonymous, although {{ctx.getCallerPrincipal()}} in
the EJB returns correct principal.