[jbossws-issues] [JBoss JIRA] (JBWS-3543) Relax SubjectCreatingPolicyInterceptor reaction to missing SecurityContext

Alessio Soldano (JIRA) jira-events at lists.jboss.org
Mon Sep 3 11:36:33 EDT 2012


     [ https://issues.jboss.org/browse/JBWS-3543?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alessio Soldano updated JBWS-3543:
----------------------------------

    Description: 
Currently the org.jboss.wsf.stack.cxf.security.authentication.SubjectCreatingPolicyInterceptor throws exception if a SecurityContext is not available in the Message instance. It should however simply log the error and let the authentication fail later when the policy engine verifies the contract policy assertions are satisfied.
The early throw of exception prevents WS-MEX from properly working for any endpoint this interceptor is attached to.

  was:
Currently the org.jboss.wsf.stack.cxf.security.authentication.SubjectCreatingPolicyInterceptor throws exception if a SecurityContext is not available in the Message instance. It should however simply log the error and let the authentication fail later.
The early throw of exception prevents WS-MEX from properly working for any endpoint this interceptor is attached to.


    
> Relax SubjectCreatingPolicyInterceptor reaction to missing SecurityContext
> --------------------------------------------------------------------------
>
>                 Key: JBWS-3543
>                 URL: https://issues.jboss.org/browse/JBWS-3543
>             Project: JBoss Web Services
>          Issue Type: Sub-task
>      Security Level: Public(Everyone can see) 
>          Components: jbossws-cxf
>            Reporter: Alessio Soldano
>            Assignee: Alessio Soldano
>             Fix For: jbossws-cxf-4.1
>
>
> Currently the org.jboss.wsf.stack.cxf.security.authentication.SubjectCreatingPolicyInterceptor throws exception if a SecurityContext is not available in the Message instance. It should however simply log the error and let the authentication fail later when the policy engine verifies the contract policy assertions are satisfied.
> The early throw of exception prevents WS-MEX from properly working for any endpoint this interceptor is attached to.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jbossws-issues mailing list