Set Security Credentials for @Singleton @Startup

[pcarrollnf]

Hello,

I am using Wildfly 11.0.0 with Java 9.0.1 on Windows platform.  I am also using the Elytron security module.

I have multiple @Singleton @Startup classes that call secure EJB's.  I am trying to avoid using the @RunAsPrincipal annotation to set the security context for the class because the user may be different for each deployment.

I was able to accomplish this using the following code in JBoss 5.1.0.

private void setupCredentials()
{
  String username = "secureUser";
  String password = "secureUserPassword";

  SecurityAssociation.setServer();
  SecurityAssociation.setPrincipal( new SimplePrincipal( username ) );
  SecurityAssociation.setCredential( password.toCharArray() );
}

Is there a way to do this in Wildfly 11 using Elytron security?

Thanks

[mchoma]

Hi,

you should be able to achieve the same with SecurityDomain.authenticate() method. See [1] for usage.

[1] wildfly/Util.java at master · wildfly/wildfly · GitHub

[pcarrollnf]

Hello, thank you for the response.  I implemented this and it appears to work.  I would prefer not to use a plain text password for the following line:

final SecurityIdentity securityIdentity = securityDomain.authenticate(username, new PasswordGuessEvidence(password.toCharArray()));

It seems I would have to hard code the clear text password in the code or obtain the clear text password from a properties file.  What is the best way to avoid using clear text passwords?

If I should start a new discussion based on the question above, please let me know.

Thank you.

[mchoma]

Yes, I think make a new discussion based on your new question. And mark this as answered.