[SHIRO-472] copy and createSubjectContext doesn't set the correct security manager

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Erik Martino Hansen
• Created: 25/Nov/13 14:35
• Updated: 25/Nov/13 14:35

Description

It makes shiro rely too much on ThreadContext, this is a problem in web envirionments where websocket packets tends to sneak around the installed filter.

public static void main(String[] args) {
DefaultSecurityManager n = new DefaultSecurityManager();
SecurityUtils.setSecurityManager;
DefaultSecurityManager m = new DefaultSecurityManager();
SubjectContext ct = m.createSubjectContext();
if (m != ct.getSecurityManager())

{ throw new AssertionError("createSubjectContext doesn't set the correct security manager"); }

SubjectContext copy = m.copy(ct);
if (m != copy.getSecurityManager())

{ throw new AssertionError("copy doesn't set the correct security manager"); }

}