<div dir="ltr"><div><div><div><div>So looking at the code I am not sure if this is possible to adapt to Elytron without an API change on the Weld side of things.<br><br></div>This issue is in the Weld SecurityContext, which just as associate and disassociate methods, while elytron uses a more functional approach. <br><br></div>I think this API needs to be change so SecurityContext just has a run(PrivilidgedExceptionAction action) method, where the implementation would look something like:<br><br></div>elytronDomain.getCurrentSecurityIdentity().runAs(action)<br><br></div><div>Not sure how hard to do this will be from the Weld side and I am not sure how this method is actually used.<br></div><div><br></div>Stuart<br><div><div><div><br><div><br></div></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Apr 24, 2017 at 10:32 PM, Matej Novotny <span dir="ltr"><<a href="mailto:manovotn@redhat.com" target="_blank">manovotn@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
recently I decided, that Weld 3 (CDI 2.0, currently nearing Final at high speed) should be running on WildFly 11.<br>
Up until now, we had the integration based on 10.1.0.Final but for several reasons we want to move to 11.<br>
<br>
There were some changes and I figured out most of them but I am lost when it comes to security.<br>
I know Elytron was added but I don't know a damn thing about it - could anyone lend a hand here, please?<br>
<br>
The code is now located at this branch[1] and the very last commit shows the integration done.<br>
Vast majority is just taken from previous integration with 10.1.0.Final (branch 10.1.0.Final-weld3).<br>
The part I am concerned about is weld/subsystem/src/main/java/<wbr>org/jboss/as/weld/services/<wbr>bootstrap/<wbr>WeldSecurityServices.java [2]<br>
'getPrincipal'[3] method was earlier adapted to Elytron, and I am thinking the other methods should perhaps be adjusted as well?<br>
But then again, I have no idea how to do that with Elytron... a penny for your thoughts?<br>
<br>
Regards<br>
Matej<br>
<br>
______________________________<wbr>______________________________<wbr>______________________________<wbr>______________________________<wbr>____________<br>
[1]<a href="https://github.com/weld/wildfly/tree/11.0.0.Alpha1-weld3" rel="noreferrer" target="_blank">https://github.com/weld/<wbr>wildfly/tree/11.0.0.Alpha1-<wbr>weld3</a><br>
[2]<a href="https://github.com/weld/wildfly/blob/11.0.0.Alpha1-weld3/weld/subsystem/src/main/java/org/jboss/as/weld/services/bootstrap/WeldSecurityServices.java" rel="noreferrer" target="_blank">https://github.com/weld/<wbr>wildfly/blob/11.0.0.Alpha1-<wbr>weld3/weld/subsystem/src/main/<wbr>java/org/jboss/as/weld/<wbr>services/bootstrap/<wbr>WeldSecurityServices.java</a><br>
[3]<a href="https://github.com/weld/wildfly/blob/11.0.0.Alpha1-weld3/weld/subsystem/src/main/java/org/jboss/as/weld/services/bootstrap/WeldSecurityServices.java#L69" rel="noreferrer" target="_blank">https://github.com/weld/<wbr>wildfly/blob/11.0.0.Alpha1-<wbr>weld3/weld/subsystem/src/main/<wbr>java/org/jboss/as/weld/<wbr>services/bootstrap/<wbr>WeldSecurityServices.java#L69</a><br>
______________________________<wbr>_________________<br>
wildfly-dev mailing list<br>
<a href="mailto:wildfly-dev@lists.jboss.org">wildfly-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/wildfly-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/wildfly-dev</a><br>
</blockquote></div><br></div>