[jbossseam-issues] [JBoss JIRA] Updated: (JBSEAM-2523) Identity component should be scoped to the WAR module

[Reind D (JIRA)]

     [ https://jira.jboss.org/jira/browse/JBSEAM-2523?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Reind D updated JBSEAM-2523:
----------------------------

    Attachment: seam2523.ear.tar.gz


1. Deploy the ear.

2. Go to http://localhost:8080/a/

3. Enter any user & pass, and hit the login button.

Note that the text "****  in B.login()   ****" is output to the server log. Instead, this should say "in A.login()". It's calling B.login() instead of A.login() as configured in a.war/WEB-INF/components.xml

4. Repeat steps 2-3 on http://localhost:8080/b/ and note that the message indicates that B.login() is invoked (as expected, this time).

This example is intended to be deployed to JBoss 5.0.0.GA

Note: It's included here as a tar.gz file b/c jboss5 has issues deploying it as a zipped ear. Please unzip and deploy the exploded ear.

> Identity component should be scoped to the WAR module
> -----------------------------------------------------
>
>                 Key: JBSEAM-2523
>                 URL: https://jira.jboss.org/jira/browse/JBSEAM-2523
>             Project: Seam
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 2.1.1.GA
>         Environment: JBoss 4.2.2.GA (also tested on 4.2.0.GA)
>            Reporter: Reind D
>         Attachments: seam2523.ear.tar.gz
>
>
> I have an EAR with two web modules. I have configured the 'Identity authenticateMethod' in components.xml to use a different a method for each WAR (authA.authenticate, authB.authenticate). When attempting to login to the 'b' webapp it invokes the authenticateMethod defined in a.war. Attempting to login to the 'a' webapp works as expected. It appears as though the Identity component is not scoped to the WAR. 
> The EAR is packaged as follows:
> my-application.ear/
>     a.war/
>         WEB-INF/
>             components.xml
>         ...
>     b.war/
>         WEB-INF/
>             components.xml
>         ...
>     web.jar
> Congure authentication as follows in both components.xml files:
> a.war/WEB-INF/components.xml
> <security:identity authenticate-method="#{authA.authenticate}" /> 
> b.war/WEB-INF/components.xml
> <security:identity authenticate-method="#{authB.authenticate}" /> 

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira