Specify mapping of AccessLocalException for EJBs with @RolesAllowed
Open
@glassfishrobot is already working on this.
Since Feb 10, 2018.
- Dominant language
- Java
- Stars
- 400
- Forks
- 143
- PR merge metrics
- No merged PRs in 30d
Description
When @RolesAllowed is declared on an session bean that is also a resource class
and then the EJB may throw a AccessLocalException if the client is not authorized.
JAX-RS implementations should map this AccessLocalException to a 401 response.
Applications will of course need to correctly set up credentials and the sharing
of those between the web and ejb containers.
It remains an open issue how a JAX-RS implementation can obtain information to
return a WWW-Authenticate response header.
Environment
Operating System: All
Platform: Macintosh
Affected Versions
[2.1]
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.