[undertow-dev] Security constraints and population of ServletSecurityInfo

Stuart Douglas sdouglas at redhat.com
Thu Feb 13 21:40:10 EST 2014


When you say 'in the request the ServletSecurityInfo is (correctly) populated.' how are you actually checking this?

Stuart

----- Original Message -----
> From: "Paul K Moore" <paulkmoore at gmail.com>
> To: undertow-dev at lists.jboss.org
> Sent: Thursday, 13 February, 2014 9:59:42 PM
> Subject: [undertow-dev] Security constraints and population of	ServletSecurityInfo
> 
> Hi all,
> 
> I am seeing some odd behaviour regarding security constraints.
> 
> If I add an @ServletSecurity annotation to a servlet, in the request the
> ServletSecurityInfo is (correctly) populated.
> 
> However, if I add (notionally) the same constraint in web.xml, the
> ServletSecurityInfo is *not* populated (it’s actually a null).
> 
> Is this the intended behaviour?
> 
> Many thanks
> 
> Paul
> 
> PS: Undertow version is Undertow 1.0.0.Final-SNAPSHOT, I’ve not moved to
> Wildfly 8.0.0 Final yet :)
> _______________________________________________
> undertow-dev mailing list
> undertow-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/undertow-dev
> 



More information about the undertow-dev mailing list