[jira] Commented: (GERONIMO-4572) EJB Webservice BASIC login HTTPServletRequest into LoginModule

["Jarek Gawor (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GERONIMO-4572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12679402#action_12679402 ] 

Jarek Gawor commented on GERONIMO-4572:
---------------------------------------

Btw, you should be able to get HttpServletRequest object from WebServiceContext/MessageContext even in EJB-based web services with or without security (although it might not work on other app servers). Something like the following should work:

    @Resource
    protected WebServiceContext wsContext;
    ....

             MessageContext mc = wsContext.getMessageContext(); 
             ServletRequest req = (ServletRequest)mc.get(MessageContext.SERVLET_REQUEST);


> EJB Webservice BASIC login HTTPServletRequest into LoginModule
> --------------------------------------------------------------
>
>                 Key: GERONIMO-4572
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4572
>             Project: Geronimo
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: webservices
>    Affects Versions: 2.1.4, 2.2
>            Reporter: Kaupo Parmas
>            Assignee: Jarek Gawor
>             Fix For: 2.1.4, 2.2
>
>
> When using JAAS and loging in from a web container one can access the HttpServletRequest like this:
> HttpServletRequest request = (HttpServletRequest) PolicyContext.getContext("javax.servlet.http.HttpServletRequest"); 
> However this doesn't work when using BASIC authentication on Webservices made from EJBs - the request object is null.
> Can this feature also be enabled for EJB based webservices.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.