You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Isart (JIRA)" <ji...@apache.org> on 2013/05/15 16:35:15 UTC

[jira] [Created] (DOSGI-182) SecurityContext populated by spring security made available to CXF

Isart created DOSGI-182:
---------------------------

             Summary: SecurityContext populated by spring security made available to CXF
                 Key: DOSGI-182
                 URL: https://issues.apache.org/jira/browse/DOSGI-182
             Project: CXF Distributed OSGi
          Issue Type: Wish
    Affects Versions: 1.4.0
            Reporter: Isart


I'd like SecurityContext populated by SpringSecurity filter chain to be available in CXF, and also being available to registered services.


I've been able to apply a SpringSecurity filter chain to JAX-RS services published with DOSGi by instantiating my filter chain bean and registering it as an
osgi service with "org.apache.cxf.httpservice.filter" property.

This filter chain populates SecurityContext but also removes it when the filter chain finishes. 

org.apache.cxf.dosgi.dsw.handlers.SecurityDelegatingHttpContext is responsible of handling the filter for DOSGi registered web services.

When a request comes, the filter chain finishes before normal request processing in CXF takes place, resulting in SecurityContext not being available in CXF nor in registered web services.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira