[jboss-jira] [JBoss JIRA] (WFLY-9240) WeldSecurityServices not able to obtain the current SecurityDomain anymore

[Martin Kouba (JIRA)]

Martin Kouba created WFLY-9240:
----------------------------------

             Summary: WeldSecurityServices not able to obtain the current SecurityDomain anymore
                 Key: WFLY-9240
                 URL: https://issues.jboss.org/browse/WFLY-9240
             Project: WildFly
          Issue Type: Bug
          Components: CDI / Weld, Security
    Affects Versions: 11.0.0.Beta1
            Reporter: Martin Kouba
            Assignee: Stuart Douglas
            Priority: Critical


The integration code used by Weld 3 to propagate the security context of the current thread to different threads (needed for async events CDI 2.0 feature) is not able to obtain the current {{org.wildfly.security.auth.server.SecurityDomain}} anymore. 

The invocation of [SecurityDomain.getCurrent()|https://github.com/weld/wildfly/blob/11.0.0.Beta1-weld3/weld/subsystem/src/main/java/org/jboss/as/weld/services/bootstrap/WeldSecurityServices.java#L117] returns {{null}}. 

Note that this worked on WildFly 11.0.0.Alpha1.

It's also possible that the test (see also steps to reproduce) is wrong. A review/help from a security expert would be appreciated. 





--
This message was sent by Atlassian JIRA
(v7.2.3#72005)