[jboss-jira] [JBoss JIRA] (WFLY-9251) Security context is not thread safe

[charles ghislain (JIRA)]

charles ghislain created WFLY-9251:
--------------------------------------

             Summary: Security context is not thread safe
                 Key: WFLY-9251
                 URL: https://issues.jboss.org/browse/WFLY-9251
             Project: WildFly
          Issue Type: Bug
          Components: Security
    Affects Versions: 10.1.0.Final
         Environment: Windows, LInux
            Reporter: charles ghislain
            Assignee: Darran Lofthouse
         Attachments: wildflytestauthcontext.zip

Using a custom JAAS login module, we sometimes fail to obtain the authenticated subject from the 'javax.security.auth.Subject.container' policy context. This appear to be related to the worker threads. 

See the reproduction steps below. When a wildfly instance attempts to authenticate 500 requests coming simultaneously, a bunch of them fail. If you configure wildfly to only use a single worker thread and a single task thread, this issue disappears.




--
This message was sent by Atlassian JIRA
(v7.2.3#72005)