Elytron and EAP 7.1.0 Programattic login

[johnnuy]

Hello,

I have an EJB which is invoked using the TimerService, and from within the @Timeout method I need to perform a login and run as a particular user.

Previously I was able to use the following code with the picket box and jaas implementation of EAP 7.0

LoginContext context = new LoginContext("myRealm", new UsernamePasswordHandler("admin", "admin123");

context.login();

Subject subject = context.getSubject();

Subject.doAs(subject, (PrivilegedAction<Void>)() -> {

     invokeScheduledMethodHere();

     return null;

});

context.logout();

How would I do this using the new Elytron Systems?

thanks,

Jonny

[mchoma]

In this case @RunAsrincipal should work, when you are ok with hardcoded username.

There are also 2 programmatic approaches which should also work:

• using Elytron Authentication Context
  • Client Authentication with Elytron Client - Latest WildFly Documentation - Project Documentation Editor
• securityIdentity.runAs(callable);
  • wildfly/Util.java at master · wildfly/wildfly · GitHub

[johnnuy]

Thanks Martin!  Looking at the wildfly/Util.java I was able to get the code I required.

SecurityDomain.getCurrent().authenticate("usr", new PasswordGuessEvidence("pass".toCharArray())).runAs(<runnable>);