[jboss-jira] [JBoss JIRA] (ELY-1969) Where ModelControllerClient is initialised in process with CBH AuthenticationConfiguration takes priority.

Darran Lofthouse (Jira) issues at jboss.org
Thu May 21 05:01:11 EDT 2020


     [ https://issues.redhat.com/browse/ELY-1969?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse moved WFCORE-4975 to ELY-1969:
-----------------------------------------------

          Project: WildFly Elytron  (was: WildFly Core)
              Key: ELY-1969  (was: WFCORE-4975)
      Component/s: Authentication Client
                       (was: Security)
    Fix Version/s: 1.12.0.CR4
                       (was: 12.0.0.Beta4)


> Where ModelControllerClient is initialised in process with CBH AuthenticationConfiguration takes priority.
> ----------------------------------------------------------------------------------------------------------
>
>                 Key: ELY-1969
>                 URL: https://issues.redhat.com/browse/ELY-1969
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: Authentication Client
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>            Priority: Major
>             Fix For: 1.12.0.CR4
>
>
> In ProtocolConnectionUtils we have the following code to pass in the provided CallbackHanldler: -
> {code:java}
>         if (handler != null) {
>             mergedConfiguration = mergedConfiguration.useCallbackHandler(handler, DEFAULT_CALLBACK_KINDS);
>         }
> {code}
> However the AuthenticationClient performs the following sanitation of the specified KINDS: -
> {code:java}
>             case SET_USER_CB_KINDS:
>                 // SANITAZE on above content
>                 if (this.principal != null) {
>                     sanitazeOnMutation(SET_PRINCIPAL);
>                 }
>                 if (this.credentialSource != null) {
>                     sanitazeOnMutation(SET_CRED_SOURCE);
>                 }
>                 if (this.setRealm != null) {
>                     sanitazeOnMutation(SET_REALM);
>                 }
>                 if (this.parameterSpecs != null) {
>                     sanitazeOnMutation(SET_PARAM_SPECS);
>                 }
>                 if (this.keyManagerFactory != null) {
>                     sanitazeOnMutation(SET_KEY_MGR_FAC);
>                 }
>                 break;
> {code}
> Before passing in the CallbackHandler and specifying which KINDS is applies to the ProtocolConnectionUtils call should first remove the duplicates from the configuration.



--
This message was sent by Atlassian Jira
(v7.13.8#713008)


More information about the jboss-jira mailing list