[jboss-jira] [JBoss JIRA] (WFCORE-4659) Revert change of *not* having static default authentication context
Ondrej Chaloupka (Jira)
issues at jboss.org
Wed Sep 11 03:21:00 EDT 2019
Ondrej Chaloupka created WFCORE-4659:
----------------------------------------
Summary: Revert change of *not* having static default authentication context
Key: WFCORE-4659
URL: https://issues.jboss.org/browse/WFCORE-4659
Project: WildFly Core
Issue Type: Bug
Components: Security
Affects Versions: 10.0.0.Beta6, 10.0.0.Beta4
Reporter: Ondrej Chaloupka
Assignee: Ondrej Chaloupka
The definition of the default security context was removed to be static https://github.com/wildfly/wildfly-core/pull/3892/commits/4f34c962fec06e81673c17f8f37b4122c1034623#diff-8396de3001749ce06e45825a9bea821dR439 as it could cause defective behaviour. To quote Stuart:
{quote}
The 'standard' default is basically random, as it can vary based on what the first TCCL to access it is.
{quote}
But removing the static default authentication context makes troubles for the transaction recovery which does not have no authentication context specified. Recovery can use only global one and while it's a workaround to the real issue of recovery has not defined any, it was a working solution. With the mentioned change this solution stopped to work.
Loading of the static authentication context should be reverted back and later fix properly.
--
This message was sent by Atlassian Jira
(v7.13.5#713005)
More information about the jboss-jira
mailing list