[jboss-jira] [JBoss JIRA] (WFLY-10480) ElytronSecurityDomainContextImpl does not propagate authenticated subject

Alessio Soldano (JIRA) issues at jboss.org
Wed May 30 03:49:00 EDT 2018


Alessio Soldano created WFLY-10480:
--------------------------------------

             Summary: ElytronSecurityDomainContextImpl does not propagate authenticated subject
                 Key: WFLY-10480
                 URL: https://issues.jboss.org/browse/WFLY-10480
             Project: WildFly
          Issue Type: Bug
            Reporter: Alessio Soldano
            Assignee: Jim Ma
             Fix For: 14.0.0.CR1


We have a usecase scenario which requires ElytronSecurityDomainContextImpl to propagate the authenticated subject from webservice subsystem to

ejb subystem. With old security domain , we used to rely on the following integration code in the SecurityDomainContextImpl:

    @Override
    public void pushSubjectContext(final Subject subject, final Principal principal, final Object credential) {
        AccessController.doPrivileged(new PrivilegedAction<Void>() {

            public Void run() {
                SecurityContext securityContext = SecurityContextAssociation.getSecurityContext();
                if (securityContext == null) {
                    securityContext = createSecurityContext(getSecurityDomain());
setSecurityContextOnAssociation(securityContext);
                }
securityContext.getUtil().createSubjectInfo(principal, credential, subject);
                return null;
            }
        });
    }


When an Elytron security domain is configured for the ws application, the functionality is not working as the corresponding method in ElytronSecurityDomainContextImpl is empty.




--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list