Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 10.0.0.Beta4, 10.0.0.Final
Affects Version/s: None
Component/s: Security
Labels:
None

Git Pull Request:
https://github.com/wildfly/wildfly-core/pull/3892

The default AuthenticationContext global supplier initializes a static based on wildfly-config..xml found in the current class loader.

As this is initialised lazily the result of this will depend on which deployment is used to access this first. If there are multiple deployments other deployments can end up using the wrong configuration.

is cloned by

JBEAP-17383 [GSS](7.2.z) Default AuthenticationContext is a static with undefined behaviour

Closed

is incorporated by

JBEAP-17383 [GSS](7.2.z) Default AuthenticationContext is a static with undefined behaviour

Closed

is related to

WFCORE-4659 Partial revert of *not* having static default authentication context

Closed

WFCORE-4668 Transaction recovery of remote ejb calls should not be using static Default AuthenticationContext

Open

Assignee:: Stuart Douglas (Inactive)

Reporter:: Stuart Douglas (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 2019/08/11 11:07 PM

Updated:: 2022/09/09 7:10 AM

Resolved:: 2019/08/14 5:59 AM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates