[jboss-jira] [JBoss JIRA] (WFCORE-4599) Default AuthenticationContext is a static with undefined behaviour

[Stuart Douglas (Jira)]

Stuart Douglas created WFCORE-4599:
--------------------------------------

             Summary: Default AuthenticationContext is a static with undefined behaviour
                 Key: WFCORE-4599
                 URL: https://issues.jboss.org/browse/WFCORE-4599
             Project: WildFly Core
          Issue Type: Bug
          Components: Security
            Reporter: Stuart Douglas
            Assignee: Darran Lofthouse


The default AuthenticationContext global supplier initializes a static based on wildfly-config..xml found in the current class loader.

As this is initialised lazily the result of this will depend on which deployment is used to access this first. If there are multiple deployments other deployments can end up using the wrong configuration.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)