geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jarek Gawor (JIRA)" <j...@apache.org>
Subject [jira] Commented: (GERONIMO-4572) EJB Webservice BASIC login HTTPServletRequest into LoginModule
Date Thu, 05 Mar 2009 22:43:56 GMT

    [ https://issues.apache.org/jira/browse/GERONIMO-4572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12679402#action_12679402
] 

Jarek Gawor commented on GERONIMO-4572:
---------------------------------------

Btw, you should be able to get HttpServletRequest object from WebServiceContext/MessageContext
even in EJB-based web services with or without security (although it might not work on other
app servers). Something like the following should work:

    @Resource
    protected WebServiceContext wsContext;
    ....

             MessageContext mc = wsContext.getMessageContext(); 
             ServletRequest req = (ServletRequest)mc.get(MessageContext.SERVLET_REQUEST);


> EJB Webservice BASIC login HTTPServletRequest into LoginModule
> --------------------------------------------------------------
>
>                 Key: GERONIMO-4572
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4572
>             Project: Geronimo
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: webservices
>    Affects Versions: 2.1.4, 2.2
>            Reporter: Kaupo Parmas
>            Assignee: Jarek Gawor
>             Fix For: 2.1.4, 2.2
>
>
> When using JAAS and loging in from a web container one can access the HttpServletRequest
like this:
> HttpServletRequest request = (HttpServletRequest) PolicyContext.getContext("javax.servlet.http.HttpServletRequest");

> However this doesn't work when using BASIC authentication on Webservices made from EJBs
- the request object is null.
> Can this feature also be enabled for EJB based webservices.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message