[jbossseam-issues] [JBoss JIRA] Created: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
5:08 p.m.
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when
using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/jira/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Priority: Critical
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:07 a.m.
New subject: [jbossseam-issues] [JBoss JIRA] Updated: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/jira/browse/JBSEAM-3629?page=com.atlassian.jira.pl...
]
Shane Bryzak updated JBSEAM-3629:
---------------------------------
Fix Version/s: 2.1.1.GA
Assignee: Dan Allen
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/jira/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.GA
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:33 a.m.
New subject: [jbossseam-issues] [JBoss JIRA] Commented: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/jira/browse/JBSEAM-3629?page=com.atlassian.jira.pl...
]
Dan Allen commented on JBSEAM-3629:
-----------------------------------
Fixed. If Seam security is disabled, then the wrapper needs to delegate to the wrapped
request. I also added an easier way to disable seam security.
<core:init security-enabled="false"/>
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/jira/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.GA
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:33 a.m.
New subject: [jbossseam-issues] [JBoss JIRA] Resolved: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/jira/browse/JBSEAM-3629?page=com.atlassian.jira.pl...
]
Dan Allen resolved JBSEAM-3629.
-------------------------------
Resolution: Done
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/jira/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.GA
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:35 a.m.
New subject: [jbossseam-issues] [JBoss JIRA] Commented: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/jira/browse/JBSEAM-3629?page=com.atlassian.jira.pl...
]
Dan Allen commented on JBSEAM-3629:
-----------------------------------
You could also just disable the filter.
<web:identity-filter disabled="true"/>
But that is not a truly elegant solution, which is why I made the fix that I did.
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/jira/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.GA
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:18 p.m.
New subject: [jbossseam-issues] [JBoss JIRA] Commented: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/jira/browse/JBSEAM-3629?page=com.atlassian.jira.pl...
]
Denis Forveille commented on JBSEAM-3629:
-----------------------------------------
Thanks Dan
Will this be in v2.1.1.CR2 or just in GA (as the "fix version"state it)?
If it is in CR2 iIwill test it as soon as CR2 is out
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/jira/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.GA
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:12 p.m.
New subject: [jbossseam-issues] [JBoss JIRA] Updated: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/jira/browse/JBSEAM-3629?page=com.atlassian.jira.pl...
]
Dan Allen updated JBSEAM-3629:
------------------------------
Fix Version/s: 2.1.1.CR2
(was: 2.1.1.GA)
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/jira/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.CR2
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:12 p.m.
New subject: [jbossseam-issues] [JBoss JIRA] Commented: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/jira/browse/JBSEAM-3629?page=com.atlassian.jira.pl...
]
Dan Allen commented on JBSEAM-3629:
-----------------------------------
CR2
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/jira/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.CR2
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:24 p.m.
New subject: [jbossseam-issues] [JBoss JIRA] Closed: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/jira/browse/JBSEAM-3629?page=com.atlassian.jira.pl...
]
Denis Forveille closed JBSEAM-3629.
-----------------------------------
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/jira/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.CR2
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:18 p.m.
New subject: [JBoss JIRA] Commented: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/browse/JBSEAM-3629?page=com.atlassian.jira.plugin....
]
Markos Fragkakis commented on JBSEAM-3629:
------------------------------------------
What if someone wants to use the J2EE security to populate the Seam Identity?
For example, I have a WebLogic authenticator, which I would like to "populate"
the Seam Identity. Then I would be able to use it within the application to restrict
access. How would this work?
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.CR2
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:18 p.m.
New subject: [JBoss JIRA] Commented: (JBSEAM-3629) Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always returning null when using plain J2EE security
[
https://jira.jboss.org/browse/JBSEAM-3629?page=com.atlassian.jira.plugin....
]
Markos Fragkakis commented on JBSEAM-3629:
------------------------------------------
What if someone wants to use the J2EE security to populate the Seam Identity?
For example, I have a WebLogic authenticator, which I would like to "populate"
the Seam Identity. Then I would be able to use it within the application to restrict
access. How would this work?
Since Seam v2.1.0, httpServletRequest.getUserPrincipal() is always
returning null when using plain J2EE security
----------------------------------------------------------------------------------------------------------------
Key: JBSEAM-3629
URL: https://jira.jboss.org/browse/JBSEAM-3629
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.GA
Environment: Seam v2.1.0GA, WebSphere v6.1.0.17 (Without EJB3 FP), RF v3.2.2,
facelets 1.1.14, JSF RI 1.2_09
Reporter: Denis Forveille
Assignee: Dan Allen
Priority: Critical
Fix For: 2.1.1.CR2
Since v2.1.GA, it is not possible to use plain J2EE security.
Now, httpServletRequest.getUserPrincipal() always return null and also
@In
UserPrincipal principal;
does not work
This is not working because the http request is wrapped in IdentityRequestWrapper (in
IdentityFilter) and its getUserPrincipal() method is reading principal variable on
Identity component.
httpServletRequest.getUserPrincipal() should work when seam security is not use, and so
we should have a way to "disable" Seam security
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5118
days inactive
5724
days old
10 comments
4 participants
participants (4)
-
Dan Allen (JIRA) -
Denis Forveille (JIRA)
-
Markos Fragkakis (JIRA)
-
Shane Bryzak (JIRA)