[jboss-jira] [JBoss JIRA] Created: (JBAS-5549) security principal not persisted between requests when using WebAuthentication

[Marcin Gryszko (JIRA)]

security principal not persisted between requests when using WebAuthentication
------------------------------------------------------------------------------

                 Key: JBAS-5549
                 URL: http://jira.jboss.com/jira/browse/JBAS-5549
             Project: JBoss Application Server
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Security
    Affects Versions: JBossAS-4.2.2.GA
            Reporter: Marcin Gryszko
         Assigned To: Anil Saldhana
            Priority: Minor


If WebAuthentication is used and no security-constraint is defined in web.xml, the principal is not retained between requests. The code snippet performing the authentication is almost the same as in the wiki:

        WebAuthentication webAuth = new WebAuthentication();
        webAuth.login(username, password);        
        System.out.println(request.getUserPrincipal());

The call to request.getUserPrincipal() gives back the correct user name.

When I access the web application for the second time, a call to request.getUserPrincipal() returns null.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira