[jboss-jira] [JBoss JIRA] (WFCORE-5020) Although elytron has module for JACC factory it is not used for JACC

[Darran Lofthouse (Jira)]

     [ https://issues.redhat.com/browse/WFCORE-5020?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated WFCORE-5020:
-------------------------------------
    Description: 
A module can be specified and this is used to load the specified provider class and instantiate it, however this is separate to the one instantiated by PolicyConfigurationFactory.

Elytron does set a system property to ensure the configured class name is used but does not actually ensure the module is used for class loading.

At the same time it should be ensuring there is only a single instance of the class.

Finally we should verify the correct class has been loaded in case some race condition has caused premature initialisation - those can be difficult to debug.

  was:
A module can be specified and this is used to load the specified provider class and instantiate it, however this is separate to the one instantiated by PolicyConfigurationFactory.

Elytron does set a system property to ensure the configured class name is used but does not actually ensure the module is used for class loading.

At the same time it should be ensuring there is only a single instance of the class.



> Although elytron has module for JACC factory it is not used for JACC
> --------------------------------------------------------------------
>
>                 Key: WFCORE-5020
>                 URL: https://issues.redhat.com/browse/WFCORE-5020
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 12.0.1.Final
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>            Priority: Major
>             Fix For: 13.0.0.Beta2
>
>
> A module can be specified and this is used to load the specified provider class and instantiate it, however this is separate to the one instantiated by PolicyConfigurationFactory.
> Elytron does set a system property to ensure the configured class name is used but does not actually ensure the module is used for class loading.
> At the same time it should be ensuring there is only a single instance of the class.
> Finally we should verify the correct class has been loaded in case some race condition has caused premature initialisation - those can be difficult to debug.



--
This message was sent by Atlassian Jira
(v7.13.8#713008)