[jboss-jira] [JBoss JIRA] (ELY-1939) [GSS][7.2.2] HTTP External Security Not Supported by Elytron

[Ashley Abdel-Sayed (Jira)]

     [ https://issues.redhat.com/browse/ELY-1939?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ashley Abdel-Sayed deleted ELY-1939:
------------------------------------


> [GSS][7.2.2] HTTP External Security Not Supported by Elytron
> ------------------------------------------------------------
>
>                 Key: ELY-1939
>                 URL: https://issues.redhat.com/browse/ELY-1939
>             Project: WildFly Elytron
>          Issue Type: Feature Request
>            Reporter: Ashley Abdel-Sayed
>            Assignee: Ashley Abdel-Sayed
>            Priority: Major
>
> For legacy security, there's an EXTERNAL HTTP authentication mechanism (io.undertow.security.impl.ExternalAuthenticationMechanism) which performs no verification and simply uses the principal that was passed from the REMOTE_USER attribute by the AJP protocol. There is a "ClientLoginModule" in legacy security used as such: https://access.redhat.com/solutions/3465231.  It is a requirement to add an equivalent of this EXTERNAL mechanism available in legacy and Elytron-SASL for Elytron-HTTP in order to migrate away from legacy security.



--
This message was sent by Atlassian Jira
(v7.13.8#713008)