[CXF-9004] Jetty12 : always use pre-saved HTTP_REQUEST from InMessage to populate SecurityContext

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.1.0
• Component/s: Transports
• Estimated Complexity: Unknown
• Assignee: Freeman Yue Fang
• Reporter: Freeman Yue Fang
• Created: 19/Apr/24 19:38
• Updated: 19/Apr/24 20:18
• Resolved: 19/Apr/24 20:17

Description

Ensure we use HttpServletRequest from the one saved in inMessage as this could be the cachedInput one in oneway and ReplyTo is specified when ws-addressing is used, which means we need to switch thread context and underlying transport might discard any data on the original stream.

So always retrieve the pre-saved HTTP_REQUEST from InMessage, so this could be the original HttpServletRequest or the Cached HttpServletRequest when it's necessary

Issue Links

• links to: GitHub Pull Request #1823