[jboss-jira] [JBoss JIRA] (WFLY-2809) JACC PolicyContext.getContext("javax.servlet.http.HttpServletRequest")

[Frank Cornelis (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-2809?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12938766#comment-12938766 ] 

Frank Cornelis commented on WFLY-2809:
--------------------------------------

Did some more tests, even from within the Servlet itself you cannot do:
{code}
PolicyContext.getContext("javax.servlet.http.HttpServletRequest")
{code}
The only contexts that are available are:
* org.jboss.security.auth.spi.CallbackHandler
* javax.security.auth.Subject.container

This while JACC 1.5 clearly states:
4.6.1.3 HttpServletRequest Policy Context Handler
All Servlet containers must register a PolicyContextHandler whose getContext
method returns a javax.servlet.http.HttpServletRequest object when invoked with
the key “javax.servlet.http.HttpServletRequest”. When this handler is activated,
the container must return the HttpServletRequest object corresponding to the
component request being processed by the container.
                
> JACC PolicyContext.getContext("javax.servlet.http.HttpServletRequest")
> ----------------------------------------------------------------------
>
>                 Key: WFLY-2809
>                 URL: https://issues.jboss.org/browse/WFLY-2809
>             Project: WildFly
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: EE
>    Affects Versions: 8.0.0.CR1
>            Reporter: Frank Cornelis
>            Assignee: Stefan Guilhen
>            Priority: Blocker
>         Attachments: 0001-integration-test-for-JACC-PolicyContext.patch
>
>
> Calling
> {code}
> PolicyContext.getContext("javax.servlet.http.HttpServletRequest");
> {code}
> within a @Stateless session bean gives an exception.
> I've created an integration test to reproduce this issue.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira