-
Requirement
-
Resolution: Done
-
Blocker
-
None
-
-
-
-
https://gitlab.cee.redhat.com/red-hat-jboss-enterprise-application-platform-documentation/eap-documentation/merge_requests/3495, https://gitlab.cee.redhat.com/red-hat-jboss-enterprise-application-platform-documentation/eap-documentation/merge_requests/3513, https://gitlab.cee.redhat.com/red-hat-jboss-enterprise-application-platform-documentation/eap-documentation/merge_requests/3524, https://gitlab.cee.redhat.com/red-hat-jboss-enterprise-application-platform-documentation/eap-documentation/merge_requests/3542, https://gitlab.cee.redhat.com/red-hat-jboss-enterprise-application-platform-documentation/eap-documentation/merge_requests/3547, https://gitlab.cee.redhat.com/red-hat-jboss-enterprise-application-platform-documentation/eap-documentation/merge_requests/3602, https://gitlab.cee.redhat.com/red-hat-jboss-enterprise-application-platform-documentation/eap-documentation/merge_requests/3629, https://gitlab.cee.redhat.com/red-hat-jboss-enterprise-application-platform-documentation/eap-documentation/merge_requests/3637
Provide ability to
a) Propagate security context from client to the server for remoting calls including EJBs.
b) Run remote Server components within the security context of a given user.
Assume the following invocation sequence:
client invocation as "Bob" -> EJB A on server 1 -> EJB B on server 2
server 2 will "trust" the invocation from server 1 is being made under the user "Bob", and his permissions, and that server 1 has already authenticated Bob
Additionally their will be an API for the client application to dynamically switch users over the same underlying connection.
The feature will be a generic remoting capability available to all remoting based protocols, however users will only interact with it using EJB and remote JNDI invocation.
For more please see the related RFE: https://issues.jboss.org/browse/PRODMGT-1060
- is blocked by
-
JBEAP-13056 Add information about ElytronAuthenticator into documentation
- Closed
- is related to
-
JBEAP-12934 Authorization identity forwarding not exposed to configuration
- Closed
- relates to
-
JBEAP-13056 Add information about ElytronAuthenticator into documentation
- Closed
-
JBEAP-11896 (7.1.z) Document how to use Elytron API to switch identities in server-to-server EJB calls
- Closed
- links to