Uploaded image for project: 'Red Hat Process Automation Manager'
  1. Red Hat Process Automation Manager
  2. RHPAM-4151

Incorrect response for REST service when "org.kie.server.bypass.auth.user" used with Spring Boot Runtime

XMLWordPrintable

    • 2022 Week 11-13 (from Mar 14), 2022 Week 14-16 (from Apr 4), 2022 Week 17-19 (from Apr 25), 2022 Week 20-22 (from May 16), 2022 Week 23-25 (from Jun 6), 2022 Week 26-28 (from Jun 27), 2022 Week 29-31 (from Jul 18)

      The Spring Boot / SSO configuration:

      https://github.com/kiegroup/droolsjbpm-integration/blob/main/kie-spring-boot/kie-spring-boot-autoconfiguration/jbpm-spring-boot-autoconfiguration/src/main/java/org/jbpm/springboot/security/SpringSecurityUserGroupCallback.java

      https://github.com/kiegroup/droolsjbpm-integration/blob/main/kie-spring-boot/kie-spring-boot-samples/keycloak-kie-server-spring-boot-sample/src/main/java/org/kie/server/springboot/samples/KeycloakIdentityProvider.java

      and the default Spring Identity Provider/Callback:

      https://github.com/kiegroup/droolsjbpm-integration/blob/7.59.x/kie-spring-boot/kie-spring-boot-autoconfiguration/jbpm-spring-boot-autoconfiguration/src/main/java/org/jbpm/springboot/security/SpringSecurityIdentityProvider.java

      suffers from the same defect as described into RHPAM-4087.

      We assume that the fix would mean to enhance SpringSecurityUserGroupCallback to pass userId to the pluggable identity providers, such as: KeycloakIdentityProvider, and SpringSecurityIdentityProvider.

       

      Note. The steps to reproduce it, are the same fully described into the original Jira RHPAM-4087, but change the callback from "JAASUserGroupCallbackImpl" to "SpringSecurityUserGroupCallback"

              rhn-support-egonzale Enrique Gonzalez Martinez (Inactive)
              rhn-support-dmammare Daniele Mammarella
              Antonio Fernandez Alhambra Antonio Fernandez Alhambra (Inactive)
              Antonio Fernandez Alhambra Antonio Fernandez Alhambra (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: