[SMXCOMP-711] JBIJAASInterceptor incorrectly positioned in interceptor chain when WS-SP support enabled

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: servicemix-cxf-bc-2009.02
• Fix Version/s: servicemix-cxf-bc-2010.01
• Component/s: servicemix-cxf-bc
• Patch Info: Patch Available
• Assignee: Freeman Yue Fang
• Reporter: David Valeri
• Created: 05/Feb/10 16:42
• Updated: 11/Feb/10 09:50
• Resolved: 11/Feb/10 09:07

Description

JBIJAASInterceptor does not list PolicyBasedWSS4JinInterceptor in its before list. This interceptor is dynamically added by the PolicyInInterceptor when WS-Policy and WS-Security Policy based configuration is in use. The bug precludes authentication based on security processing driven by WS-Policy based configuration as the JBIJAASInterceptor may be executed before the PolicyBasedWSS4JiInInterceptor has had a chance to process the security header.