8 Replies Latest reply on Jan 15, 2016 6:59 PM by arielcarrera

Security using Wildfly 8

arielcarrera Dec 21, 2015 12:26 PM

I think that Switchyard could have a problem with the security context using Wildfly 8.

When I deploy a sample app using Wildfly 8, I get the exception:

Caused by: java.lang.NoClassDefFoundError: org/apache/catalina/connector/RequestFacade

at org.switchyard.security.jboss.credential.extractor.JBossServletRequestCredentialExtractor.<clinit>(JBossServletRequestCredentialExtractor.java:42) [switchyard-security-jboss-2.0.0.Final.jar:2.0.0.Final]

at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) [rt.jar:1.8.0_60]

at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) [rt.jar:1.8.0_60]

at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) [rt.jar:1.8.0_60]

at java.lang.reflect.Constructor.newInstance(Constructor.java:422) [rt.jar:1.8.0_60]

at java.lang.Class.newInstance(Class.java:442) [rt.jar:1.8.0_60]

at java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:380) [rt.jar:1.8.0_60]

... 46 more

I read the source code into github and I see that switchyard-security-jboss is ok for jboss-as 7 but not for wildfly. Wildfly doesn't have jbossweb.jar, it has a wildfly-web.jar that doesn't contain catalina's source code anymore.

1. Re: Security using Wildfly 8

tcunning Dec 21, 2015 3:17 PM (in response to arielcarrera)

Hi Ariel,

What version of Wildfly are you using? SwitchYard 2.0.0 supports WildFly 8.1, but not any of the subsequent versions yet.
Actions
2. Re: Security using Wildfly 8

arielcarrera Dec 21, 2015 4:35 PM (in response to tcunning)

Hi Tom, I am using WildFly 8.1.0.Final.
As you can see in wildfly's pom 8.1.0.Final in Github ( wildfly/pom.xml at 8.1.0.Final · wildfly/wildfly · GitHub ), jbossweb is excluded and wildfly-web is used.

I think that "core/security/jboss" needs to be extended by a new "core/security/jboss/wildfly" excluding the JBossSecurityProvider class and implementing a new WildflySecurityProvider class at least using wildfly-web instead of jbossweb classes (a similar thing I saw that you are doing successfully into "switchyard/release/jboss-as7/wildfly/", replacing all jbossweb dependencies).
Actions
3. Re: Security using Wildfly 8

tcunning Dec 21, 2015 4:52 PM (in response to arielcarrera)

I definitely see what you are saying. I don't think this has been addressed yet in our WildFly 10 support either.

I've logged the following bug : https://issues.jboss.org/browse/SWITCHYARD-2847

If you want to add any details that you think are important, or if you want to contribute a small app reproducer, it'd definitely be appreciated.
Actions
4. Re: Security using Wildfly 8

ozkin Dec 22, 2015 7:31 AM (in response to tcunning)

Sorry, a bit off topic.. what version of SwitchYard will be supporting WildFly 10?
Actions
5. Re: Security using Wildfly 8

tcunning Dec 23, 2015 12:10 PM (in response to ozkin)

Max - the next community release should support WildFly 10. Tomo has already put in a lot of work in this area if you look at the last commits - if you want to build from source, we'd love you to take a sneak peek.

https://github.com/jboss-switchyard/switchyard/commits/master
Actions
6. Re: Security using Wildfly 8

arielcarrera Dec 30, 2015 2:49 PM (in response to tcunning)

Hi Tom, I will try to contribute to the project in the manner that i can. I am working in a solution for [SWITCHYARD-2847], I will send you the code during the next week if it works.
At the same manner I will try to contribute with a security implementation using Keycloak instead of Picketlink.
Actions
7. Re: Security using Wildfly 8

tcunning Jan 5, 2016 10:40 AM (in response to arielcarrera)

Awesome! Thanks, Ariel!
Actions
8. Re: Security using Wildfly 8

arielcarrera Jan 15, 2016 6:59 PM (in response to tcunning)

Hi Tom, I've committed a core/security/wildfly implementation last week, and now I've added a demo quickstart project using wildfly 8.0.1.Final / switchyard and keycloak.
Check it, maybe you could reuse some code from it. Obviously, it needs to be improved and test better.

Implementing wildfly core/security https://issues.jboss.org/browse/SWITCHYARD-2847 by arielcarrera · Pull Request #58 · …
Actions

Go to original post