[teiid-issues] [JBoss JIRA] (TEIID-4561) Deprecate the PassthroughIdentityLoginModule

[Ramesh Reddy (JIRA)]

    [ https://issues.jboss.org/browse/TEIID-4561?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13321383#comment-13321383 ] 

Ramesh Reddy commented on TEIID-4561:
-------------------------------------

That login module is some how configured to work with <login-config> value of KEYCLOAK in web.xml, I do not if one can use directly as JAAS login module.

>A Subject is passed into initialize and should be the one that is the current Subject for the Teiid thread accessing the data source correct?
Yes, the subject passed into the initialize is same one goes into the data source, but initialize creates a new Subject. I believe the currentSubject in this case in null always. Yes, I may have used same code.

> Deprecate the PassthroughIdentityLoginModule
> --------------------------------------------
>
>                 Key: TEIID-4561
>                 URL: https://issues.jboss.org/browse/TEIID-4561
>             Project: Teiid
>          Issue Type: Quality Risk
>          Components: Server
>            Reporter: Steven Hawkins
>            Assignee: Steven Hawkins
>             Fix For: 9.2
>
>
> The delegation capability of the PassthroughIdentityLoginModule can be associated with the underlying OAuth10/20 login modules (similar to the delegationCredential behavior of the KerberosLoginModule).  Also the OAuthCredentialContext should be changed to use the Subject private credentials rather than a ThreadLocal.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)