[jboss-jira] [JBoss JIRA] (WFCORE-2724) Attribute protocol in authentication-configuration of Elytron subsystem is not used

Ondrej Lukas (JIRA) issues at jboss.org
Wed Apr 26 04:57:00 EDT 2017


     [ https://issues.jboss.org/browse/WFCORE-2724?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ondrej Lukas updated WFCORE-2724:
---------------------------------
    Description: 
When authentication-configuration in Elytron subsystem uses attribute {{protocol}} then value of this attribute is not used for outgoing connection. Attributes {{host}} and {{port}} are used correctly.

Following authentication-configuration of Elytron subsystem should use URL {{remote+http://localhost:9990}} for outgoing connection, but protocol {{remote+http}} from {{protocol}} is not used:
{code}
<authentication-configuration name="authConfig" authentication-name="admin" protocol="remote+http" host="localhost" port="9990">
    <credential-reference clear-text="pass at 123"/>
</authentication-configuration>
{code}


  was:
When authentication-configuration in Elytron subsystem uses attribute {{protocol}} then value of this attribute is not used for outgoing connection. Attributes {{host}} and {{port}} are used correctly.

Following authentication-configuration of Elytron subsystem should use URL {{remote+http://localhost:9990}} for outgoing connection, but protocol {{remote+http}} from {{protocol}} is not used:
{code}
<authentication-configuration name="authConfig" authentication-name="admin" protocol="remote+http" host="localhost" port="9990">
    <credential-reference clear-text="pass at 123"/>
</authentication-configuration>
{code}

We request blocker because this issue blocks feature for RFE EAP7-568. Due to issue incorrect protocol can be unexpectedly used for outgoing connection, e.g. http can be used instead of https.

This issue is blocker for GA, not for testing.



> Attribute protocol in authentication-configuration of Elytron subsystem is not used
> -----------------------------------------------------------------------------------
>
>                 Key: WFCORE-2724
>                 URL: https://issues.jboss.org/browse/WFCORE-2724
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 3.0.0.Beta13
>            Reporter: Ondrej Lukas
>            Assignee: Darran Lofthouse
>            Priority: Blocker
>
> When authentication-configuration in Elytron subsystem uses attribute {{protocol}} then value of this attribute is not used for outgoing connection. Attributes {{host}} and {{port}} are used correctly.
> Following authentication-configuration of Elytron subsystem should use URL {{remote+http://localhost:9990}} for outgoing connection, but protocol {{remote+http}} from {{protocol}} is not used:
> {code}
> <authentication-configuration name="authConfig" authentication-name="admin" protocol="remote+http" host="localhost" port="9990">
>     <credential-reference clear-text="pass at 123"/>
> </authentication-configuration>
> {code}



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list