Uploaded image for project: 'CXF'
  1. CXF
  2. CXF-5603

The DefaultSecurityContext should use a supplied username to help find the User Principal

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.7.10
    • 2.7.11, 3.0
    • None
    • None
    • Unknown

    Description


      The JAASLoginInterceptor populates the DefaultSecurityContext using the authenticated JAAS Subject. It tries to find the user principal, as opposed to the roles, by finding the first non-Group principal. However, in the case of a JAAS implementation that doesn't store roles as Groups, it may end up storing a role as the user principal. This task is to first try to match the given username against the non-Group principals, and then to default to the old behaviour.

      Attachments

        Activity

          People

            coheigea Colm O hEigeartaigh
            coheigea Colm O hEigeartaigh
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: