[jboss-jira] [JBoss JIRA] (ELY-496) Support for JAAS Subject inclusion in SecurityIdentity (via PeerIdentity)

[David Lloyd (JIRA)]

David Lloyd created ELY-496:
-------------------------------

             Summary: Support for JAAS Subject inclusion in SecurityIdentity (via PeerIdentity)
                 Key: ELY-496
                 URL: https://issues.jboss.org/browse/ELY-496
             Project: WildFly Elytron
          Issue Type: Enhancement
          Components: API / SPI
            Reporter: David Lloyd


We will probably need a way to configure a security domain to associate an legacy JAAS Subject to a SecurityIdentity.  This would fit with the existing capabilities of associating a PeerIdentity to the SecurityIdentity, and transforming the SecurityIdentity.

However the way that PeerIdentity performs associations is with a before and after call.  We need to support another mechanism that can use e.g. a function to wrap, because the only way to associate a Subject in JAAS is to create an AccessControlContext with a SubjectDomainCombiner, and to associate an AccessControlContext one must use doPrivileged.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)