spring-projects / spring-projects/spring-security

Add DelegatingSecurityContextThreadFactory

Open
#19,075 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

status: waiting-for-triage type: enhancement
Dominant language
Java
Stars
9.6k
Forks
6.3k
Avg merge
2d 11h
Merged PRs (30d)
52

Description

Expected Behavior

Add DelegatingSecurityContextThreadFactory similar to other DelegatingSecurityContext* classes.

Current Behavior

There is no simple way to propagate context into libraries accepting ThreadFactory as argument and not Executor.

Context

Main motivation for this change is an ability to propagate Security Context to Structured Concurrency Subtasks.
Proposed Structured Concurrency API accepts thread factory to create the thread to execute each subtask.
See Configuration section in JEP 533.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Read the existing DelegatingSecurityContext* classes and their ThreadFactory-related entry points first. Compare their context propagation behavior with the Java ThreadFactory API and the structured concurrency use case described in JEP 533. Done means adding DelegatingSecurityContextThreadFactory so libraries accepting a ThreadFactory can propagate SecurityContext to created threads.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.