[jboss-jira] [JBoss JIRA] (ELY-1440) FlexibleIdentityAssociation should runAs the known SecurityIdentity before associating itself.

Darran Lofthouse (JIRA) issues at jboss.org
Fri Nov 10 07:08:00 EST 2017


Darran Lofthouse created ELY-1440:
-------------------------------------

             Summary: FlexibleIdentityAssociation should runAs the known SecurityIdentity before associating itself.
                 Key: ELY-1440
                 URL: https://issues.jboss.org/browse/ELY-1440
             Project: WildFly Elytron
          Issue Type: Enhancement
          Components: API / SPI
            Reporter: Darran Lofthouse
            Assignee: Darran Lofthouse
             Fix For: 1.2.0.Beta10


This API was introduced to cover the case where authentication happens late in a request, generally that is quite a rare event.

Even though the API may be popular it would likely happen once for a session and all future requests for that session the identity would be known in advance.

At the moment by not running as the existing identity we are loosing all automatic identity outflow opportunities as calls pass from the servlet container to the EJB container.



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list