[jboss-jira] [JBoss JIRA] (SECURITY-129) Client Delegation

Tue Jul 24 12:24:07 EDT 2012

     [ https://issues.jboss.org/browse/SECURITY-129?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse resolved SECURITY-129.
---------------------------------------

    Resolution: Done

The following class has been added to allow access to the current delegated context: -

org.jboss.security.negotiation.DelegationCredentialContext

The public method in this class is considered a public API so will not be changed, if available the method will return the GSSCredential for the current request - if this is not available null will be returned.

> Client Delegation
> -----------------
>
>                 Key: SECURITY-129
>                 URL: https://issues.jboss.org/browse/SECURITY-129
>             Project: PicketBox (JBoss Security and Identity Management)
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>             Fix For: Negotiation_2.1.1
>
>
> Web browser can delegate to the server being called so same credentials can be used for further calls.
>   Delegation using GSSAPI, WS-Kerberos, credential propagation for EJB calls etc..

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira