[jboss-jira] [JBoss JIRA] (SECURITY-696) MessageFactory: Fallback to load classes from current class classloader if tccl failed

[Marek Posolda (JIRA)]

     [ https://issues.jboss.org/browse/SECURITY-696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marek Posolda updated SECURITY-696:
-----------------------------------

    Attachment: SECURITY-696.patch


Attached patch with proposed solution (Fallback to MessageFactory.class.getClassLoader())
                
> MessageFactory: Fallback to load classes from current class classloader if tccl failed
> --------------------------------------------------------------------------------------
>
>                 Key: SECURITY-696
>                 URL: https://issues.jboss.org/browse/SECURITY-696
>             Project: PicketBox (JBoss Security and Identity Management)
>          Issue Type: Enhancement
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>    Affects Versions: Negotiation_2_2_1
>         Environment: negotiation 2.2.1.Final, JBoss AS 7.1.2, GateIn portal
>            Reporter: Marek Posolda
>            Assignee: Darran Lofthouse
>            Priority: Minor
>         Attachments: SECURITY-696.patch
>
>
> Currently method MessageFactory.loadClass(String classname) has possibility to load classes only from Thread context classloader (Thread.currentThread().getContextClassLoader()).
> It could be nice if there is possibility to load classes from different classloader if TCCL failed. The best would be likely classloader of current class MessageFactory (MessageFactory.class.getClassLoader()) because libraries jboss-negotiation-common and jboss-negotiation-spnego are almost always loaded by same classloader (In JBoss AS7, they are part of same module).
> This enhancement could be helpful for example in GateIn portal integration, as we have custom NegotiationAuthenticator in different module and so we don't need to explicitly mention additional module "org.jboss.security.negotiation" in dependencies of gatein.ear/META-INF/MANIFEST.MF

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira