Major Description
To allow the jolokia jvm agent to utilise jaas with our callback handler, it is necessary to provide a wrapper that is aware of the capabilities of the various artemis login modules and provide the necessary callback implementation
httpserver supports an extension point in the form of a com.sun.net.httpserver.Authenticator that we can use. the jolokia jvm agent has an authenticator that does jaas but is limited to plain credentials. We can plug in a similar Artemis jaas delegating authenticator and do proper rbac when the jolokia jvm agent is in play.
This will allow us to reduce the surface are that we expose to support jolokia, avoiding the need for jetty.
Attachments
Issue Links
- links to
