Uploaded image for project: 'Shiro'
  1. Shiro
  2. SHIRO-630

ModularRealmAuthorizer ignores JAX-RS proxied Realms

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None
    • Environment:
      Jersey version 2.25
      Shiro version 1.2+

      Description

      I'm developing in a web environment that uses JAX-RS for dependency injection. I'd like to inject my realms by proxy so that they can be injected in request scope into singleton parents. However, the logic in ModularRealmAuthorizer#isPermitted(PrincipalCollection, Permission) does an `instanceof Authorizer` check that will fail for proxied, injected realms because they are of type `Proxy`. This issue seems to appear in versions 1.2 and later.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              lyonssp Sean Lyons
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: