[jboss-jira] [JBoss JIRA] (ELY-496) Support for JAAS Subject inclusion in SecurityIdentity (via PeerIdentity)

David Lloyd (JIRA) issues at jboss.org
Tue Sep 19 10:15:00 EDT 2017


     [ https://issues.jboss.org/browse/ELY-496?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Lloyd resolved ELY-496.
-----------------------------
    Resolution: Rejected


I think it has become apparent that we don't actually need this capability.

> Support for JAAS Subject inclusion in SecurityIdentity (via PeerIdentity)
> -------------------------------------------------------------------------
>
>                 Key: ELY-496
>                 URL: https://issues.jboss.org/browse/ELY-496
>             Project: WildFly Elytron
>          Issue Type: Enhancement
>          Components: API / SPI
>            Reporter: David Lloyd
>
> We will probably need a way to configure a security domain to associate an legacy JAAS Subject to a SecurityIdentity.  This would fit with the existing capabilities of associating a PeerIdentity to the SecurityIdentity, and transforming the SecurityIdentity.
> However the way that PeerIdentity performs associations is with a before and after call.  We need to support another mechanism that can use e.g. a function to wrap, because the only way to associate a Subject in JAAS is to create an AccessControlContext with a SubjectDomainCombiner, and to associate an AccessControlContext one must use doPrivileged.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list