[jboss-jira] [JBoss JIRA] (ELY-1948) wildfly-elytron HTTP JWT Bearer realm CORS
Darran Lofthouse (Jira)
issues at jboss.org
Wed May 13 12:42:40 EDT 2020
[ https://issues.redhat.com/browse/ELY-1948?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Darran Lofthouse reassigned ELY-1948:
-------------------------------------
Assignee: (was: Darran Lofthouse)
> wildfly-elytron HTTP JWT Bearer realm CORS
> ------------------------------------------
>
> Key: ELY-1948
> URL: https://issues.redhat.com/browse/ELY-1948
> Project: WildFly Elytron
> Issue Type: Feature Request
> Reporter: Jan Bárta
> Priority: Optional
>
> Hi,
> i found possible problem with HTTP Bearer JWT.
> If you need create dynamically CORS by +own policy JAXRS filter+, then it will be problem with expired/invalid (any other problem) JWT token. You will see CORS exception on expired/invalid JWT because wildfly-elytron refuse request before own policy JAXRS filters (as e.g. @PreMatching ContainerRequestFilter, ContainerResponseFilter).
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
More information about the jboss-jira
mailing list