[jboss-jira] [JBoss JIRA] (WFCORE-3273) sharedState is passed null by PluginAuthenticationCallbackHandler

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/WFCORE-3273?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13462907#comment-13462907 ] 

Darran Lofthouse commented on WFCORE-3273:
------------------------------------------

I may see the bug, do you have the configuration for this realm available as well?  I suspect you are seeing this when there is no authorization component? 

We currently don't make the shared state available in that case as there is nothing to share state with but as existing plug-ins can experience a NPE we should ensure we always pass it in even if we know there is nothing to share.

> sharedState is passed null by PluginAuthenticationCallbackHandler
> -----------------------------------------------------------------
>
>                 Key: WFCORE-3273
>                 URL: https://issues.jboss.org/browse/WFCORE-3273
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Security
>         Environment: Fedora 26, using ovirt-engine-wildfly package
>            Reporter: Roy Golan
>            Assignee: Darran Lofthouse
>
> oVirt's ovirt-engine uses an authorization plugin [1] for management interface that recently after upgrading to Wildfly 11 stopped working. The reason is the sharedState passed to the plugin's init method is now null.
> A current workaround this would be to avoid adding to plugin into the shareState but that means any delegating plugin would fail to find this plugin and possibly other bad stuff I'm not aware of.
> [1] https://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=blob;f=backend/manager/modules/auth-plugin/src/main/java/org/ovirt/engine/core/jboss_auth_plugin/OvirtAuthPlugIn.java;h=fe2fcb400c0c81d661c03fac173d6ad416b42b9d;hb=95d62f8d7879b1863f2db74f88affb246cf94b37#l26



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)