[jboss-jira] [JBoss JIRA] (WFCORE-5007) Make use of the SocketAddressCallbackServerMechanismFactory to set the peer's IP address during HTTP authentication

Farah Juma (Jira) issues at jboss.org
Mon Jun 15 16:53:00 EDT 2020


Farah Juma created WFCORE-5007:
----------------------------------

             Summary: Make use of the SocketAddressCallbackServerMechanismFactory to set the peer's IP address during HTTP authentication
                 Key: WFCORE-5007
                 URL: https://issues.redhat.com/browse/WFCORE-5007
             Project: WildFly Core
          Issue Type: Task
          Components: Security
            Reporter: Farah Juma
            Assignee: Farah Juma


WFCORE-4725 added the ability to configure a {{source-address-role-decoder}} to make use of the client's IP address for authorization decisions. Currently, it's only possible to make use of the IP address of a remote client during SASL authentication. To be able to make use of the IP address of a client during HTTP authentication, we just need to make use of a {{SocketAddressCallbackServerMechanismFactory}} to inform the server's callback handler of the peer's address.



--
This message was sent by Atlassian Jira
(v7.13.8#713008)


More information about the jboss-jira mailing list