spring-projects / spring-projects/spring-security
Extend AuthorizationChannelInterceptor for postReceive() implementation
@jzheaux is already working on this.
Since Sep 30, 2022.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Expected Behavior
The AuthorizationChannelInterceptor implements a similar to the preSend() in the postReceive() contract which is applicable for the PollableChannel implementations.
Current Behavior
The AuthorizationChannelInterceptor currently implements only preSend() for decision to put a Message<?> onto the MessageChannel or not.
Context
Not all MessageChannel implementations are just SubscribableChannel, there is a PollableChannel which is implemented in Spring Integration as a QueueChannel.
With this channel there is no direct connection between producer and consumer. A QueueChannel is polled by the TaskScheduler.
So, we need to be secured on that receiving side against messages we poll from the channel.
This will lead to a proper messaging security support in Spring Integration applications.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.