Questions tagged [elytron]

The WildFly Elytron project is a security framework brought to the WildFly application server to provide a single unified security framework.

80 questions
1
vote
2 answers

Wildfly 26 elytron security domain config is not working

I am trying to migrate an application to wildfly 26, and i am trying to use elytron to secure the application. I successfully run this commands using the jboss cli /subsystem=elytron/jdbc-realm=myapp-security-realm:add(principal-query=[{sql="select…
jmiguel77
  • 824
  • 9
  • 19
1
vote
2 answers

Wildlfy 26: java.lang.IllegalArgumentException: unknown handler key at javax.security.jacc.api

I am trying to upgrade a monolith application from Wildfly 23 to Wildfly 26. Originally the application used a dummy configuration of "jaspitest" in the standalone.xml Old Config for security
tomaytotomato
  • 3,788
  • 16
  • 64
  • 119
1
vote
2 answers

How can I trigger OAuth/OpenID authentication on a Java Servlet and add my own roles to the user?

On a local Wildfly server I have a simple Java servlet like below: import javax.servlet.annotation.HttpMethodConstraint; import javax.servlet.annotation.ServletSecurity; import javax.servlet.http.HttpServlet; @ServletSecurity(httpMethodConstraints…
Mar
  • 7,765
  • 9
  • 48
  • 82
1
vote
1 answer

Multiple sasl authentication mechanisms in Wildfly 24 with Elytron

I've set up Wildfly to use OAUTHBEARER auth mechanism for remote JNDI EJB lookups between my server and a desktop app, and it works great. However, I also want to set up a simple .properties file based auth method to communicate with the server…
1
vote
1 answer

WildFly Elytron for Management authentication with multiple Realms

I am trying to configure WildFly Elytron to allow authentication on the Management Interface using two different Realms with a fallback. For the example I have a ManagementRealm and a MyLDAPRealm that I want to use. If the user is recognized in the…
1
vote
1 answer

Wildfly 16: Security domain specified in jboss-web.xml is ignored

Running Wildfly 16, I specify a security domain in my application's WEB-INF/jboss-web.xml as follows: MyDomain In Wildfly's standalone.xml in…
thomas
  • 21
  • 4
1
vote
1 answer

Unable to use Jakarta EE 8 Security in WildFly 20

I'm trying to use Jakarta EE 8 Security in my application by defining a BasicAuthenticationMechanismDefinition in a CDI Bean: @BasicAuthenticationMechanismDefinition( realmName = "RealmUsersRoles") @ApplicationScoped public class…
Carla
  • 3,064
  • 8
  • 36
  • 65
1
vote
1 answer

How to authenticate a user using jdbc realm in Elytron Wildfly 17?

I have been working on Wildfly 17 Elytron. I have configured it using these jboss-cli with following commands. /subsystem=elytron/jdbc-realm=test-realm:add(principal-query=[{sql="SELECT hash FROM invientusers WHERE emailid = ?",…
Deepak
  • 13
  • 6
1
vote
2 answers

Keytool command to add a PasswordCredential to elytron keystore?

I'm running a JBOSS EAP 7.3 server and trying to add a private key to the elytron keystore. The following works: $JBOSS_HOME/bin/jboss-cli.sh --connect --command=/subsystem=elytron/credential-store=keystore:add-alias(alias='keyalias',…
sleepster
  • 72
  • 6
1
vote
1 answer

Defining jboss-web.xml security-domain causes missing dependencies for my EJBs

I have a working webapp (a .war that includes a .jar with three EJBs) that works fine. I define an LDAP security domain through…
SJuan76
  • 24,532
  • 6
  • 47
  • 87
1
vote
3 answers

Reading passwords stored in WildFly's Elytron credential store using Java?

I have couple of application password stored in Wildfly 17.x credential stores. How to programmatically accessing the stored passwords from credential store? This is how the credential store is created and password is stored in it.…
Nemo
  • 143
  • 1
  • 12
1
vote
1 answer

How to generate masked passwords for elytron?

I'd like to replace my clear text password I use in wildfly-config.xml with masked passwords, which seems to be supported in WildFly 18. I've tried using the elytron-tool to generate the masked password: ./elytron-tool.sh mask --salt 12345678…
Carla
  • 3,064
  • 8
  • 36
  • 65
1
vote
1 answer

Loading pk12 file within the application in Wildfly 16

I have a code which calls a rest api protected with certificate, and that code was working for some time without issues, until I migrate application from Wildfly 10 to Wildfly 16. The code itself is straight forward, it creates http request and set…
Mikhail Chibel
  • 1,865
  • 1
  • 22
  • 34
1
vote
1 answer

Wildfly 17 Elytron: server side authentication with classes from EAR

We plan to migrate from Picketbox to Elytron and face the following problem: With Picketbox a custom login module can use functionality of (or even can reside in) a deployment module (e.g. an EAR in wildfly/standalone/deployments) to implement…
Olaf Ziems
  • 69
  • 8
1
vote
0 answers

Wildfly 16 Elytron Keycloak setup

I am trying to secure ejbs deployed on Wildfly 16 with Elytron and Keycloak to be access from a Java swing front-end. I have checked on the internet and have not found any specific examples on how to do this. Can anyone please help showing the…