eclipse-ee4j / eclipse-ee4j/metro-wsit

Avoid Reestablishment of SC-Context in Multithreading case

Open
#296 0 comments 0 reactions 0 assignees View on GitHub
Component: secure-conversation ERR: Assignee Priority: Blocker Type: Improvement
Dominant language
Java
Stars
6
Forks
21
Avg merge
10h 2m
Merged PRs (30d)
1

Description

Hello,

In multithreading cases we have problems attaching the holded established
authorisation in ws-trust and ws-security case with enabled SC.

1.)
In WS-Trust we cache the requester subject (of the response) and set it to the
dispatcher in another thread if needed. That works, but a ../trust/RST/SCT is
made at every business service call.

2.)
In 2 way ws-security SC case we cache the hole dispatcher object and set it back
from cache if needed. Works well and no ../trust/RST/SCT is made at every call,
but we do not think that this method should be the common way..

It would be nice when metro uses static cashes ![](https://java.net/jira/images/icons/emoticons/wink.gif)

Best Greats from Berlin !
Andre
#### Environment
Operating System: All
Platform: All
#### Affected Versions
[2.1]

Source: [https://github.com/javaee/metro-wsit/issues/1300](https://github.com/javaee/metro-wsit/issues/1300)
Author: glassfishrobot

Contributor guide

Open the contributing guide

Research direction

Start by tracing the WS-Trust ../trust/RST/SCT creation path and the WS-Security dispatcher/requester-subject handling described in the issue. Compare the two multithreading approaches and determine the intended shared-context behavior; done means repeated business-service calls no longer recreate the security context while preserving correct authorization.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.