[jboss-jira] [JBoss JIRA] (WFLY-10480) ElytronSecurityDomainContextImpl does not propagate authenticated subject
Alessio Soldano (JIRA)
issues at jboss.org
Wed May 30 03:49:00 EDT 2018
Alessio Soldano created WFLY-10480:
--------------------------------------
Summary: ElytronSecurityDomainContextImpl does not propagate authenticated subject
Key: WFLY-10480
URL: https://issues.jboss.org/browse/WFLY-10480
Project: WildFly
Issue Type: Bug
Reporter: Alessio Soldano
Assignee: Jim Ma
Fix For: 14.0.0.CR1
We have a usecase scenario which requires ElytronSecurityDomainContextImpl to propagate the authenticated subject from webservice subsystem to
ejb subystem. With old security domain , we used to rely on the following integration code in the SecurityDomainContextImpl:
@Override
public void pushSubjectContext(final Subject subject, final Principal principal, final Object credential) {
AccessController.doPrivileged(new PrivilegedAction<Void>() {
public Void run() {
SecurityContext securityContext = SecurityContextAssociation.getSecurityContext();
if (securityContext == null) {
securityContext = createSecurityContext(getSecurityDomain());
setSecurityContextOnAssociation(securityContext);
}
securityContext.getUtil().createSubjectInfo(principal, credential, subject);
return null;
}
});
}
When an Elytron security domain is configured for the ws application, the functionality is not working as the corresponding method in ElytronSecurityDomainContextImpl is empty.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
More information about the jboss-jira
mailing list