[jboss-jira] [JBoss JIRA] (ELY-383) Update ServerAuthenticationContext to carry an identity from start to end

[David Lloyd (JIRA)]

     [ https://issues.jboss.org/browse/ELY-383?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Lloyd updated ELY-383:
----------------------------
    Fix Version/s:     (was: 1.1.0.Beta4)


> Update ServerAuthenticationContext to carry an identity from start to end
> -------------------------------------------------------------------------
>
>                 Key: ELY-383
>                 URL: https://issues.jboss.org/browse/ELY-383
>             Project: WildFly Elytron
>          Issue Type: Task
>          Components: API / SPI
>            Reporter: David Lloyd
>            Assignee: David Lloyd
>         Attachments: Blank Flowchart - ServerAuthenticationContext.png
>
>
> The {{ServerAuthenticationContext}} should capture the identity in force for its domain when it is constructed.  Any authorization attempt should always apply to the current identity - either the captured identity, or whatever the last successfully authorized identity was in the context.
> The attached state diagram should accurately summarize how authorization identity flows through.  Authentication identity is only available during the "NAME ASSIGNED" state; once authorization occurs, the authentication identity is no longer useful and is disposed.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)