jakartaee / jakartaee/authorization
Allow jakarta.security.jacc.PolicyConfigurationFactory.provider as context parameter
@arjantijms is already working on this.
Since Mar 21, 2024.
- Dominant language
- Java
- Stars
- 17
- Forks
- 20
- PR merge metrics
- No merged PRs in 30d
Description
The system property with name "jakarta.security.jacc.PolicyConfigurationFactory.provider" is used to set an alternative `PolicyConfigurationFactory` in Jakarta Authorization. This parameter is however not always easy to set (depending on how much the runtime is under the control of the deployer) and its basically undefined where exactly the class that the property references should live.
On the (archived) mailing list we discussed at the time alternatives to this, and suggested to use a deployable artefact for this. At the time a RAR was proposed, but since then the emphasis has shifted away from RAR and JAR deployments, to mostly WARs.
As such we can introduce a web.xml context parameter that is treated the same as the system property, but takes precedence, and loads the `PolicyConfigurationFactory` using the web archive's class loader.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.