Questions tagged [jakarta-ee-security-api]
23 questions
0
votes
0 answers
CDI Interceptor fires BEFORE HttpAuthenticationMechanism validates request
We have a JSF App that uses a custom HttpAuthenticationMechanism for authentication, it forwards users to a login page if they do not have the role required and uses @AutoApplySession for authenticated users.
We have recently added a CDI interceptor…
DaveB
- 2,953
- 7
- 38
- 60
0
votes
0 answers
Custom Authentication Mechanism with Tomcat 10
I'm using a Tomcat 10 server with Jakarta 9 and i've got a problem with my HttpAuthenticationMechanism implementation. When I call my servlets, the HttpAuthenticationMechanism is never invoked.
I checked Jakarta security, it works well with basic…
Rashkal
- 1
0
votes
0 answers
How to exclude certain files from authentication checks when using HttpAuthenticationMechanism
When using our own implementation of HttpAuthenticationMechanism how does one prevent authentication checks being triggered for certain file types?
Eg. we do not want our Authentication bean to be triggered for static resource requests such as .js /…
DaveB
- 2,953
- 7
- 38
- 60
0
votes
0 answers
JAX-WS Jakarta EE 9 or 10
I am struggling to get Basic auth working in JAX-WS. All the examples using annotation
@BasicAuthenticationMechanismDefinition() (which is how I want to do it) are using servlets. I am new to JAX-WS and was wondering if I should be able to…
Damien Cooke
- 599
- 10
- 20
0
votes
0 answers
Wildfly 26.1.1 and Auth0: java.lang.IllegalArgumentException: unknown handler key
I followed the Auth0 Java EE Qiuckstart to add Auth0 security integration into my Cargotacker project(fork of Eclipse CargoTracker) using the EE Security API.
There is a profile facelet page like this.
Hantsy
- 8,006
- 7
- 64
- 109
0
votes
2 answers
JakartaEE 10 OpenIdAuthenticationMechanism failed with Auth0
Got help from the Redhat guy, finally my example works with Local KeyCloak(in Docker) as well as Okta.
My example is here: https://github.com/hantsy/jakartaee10-sandbox/tree/master/security-oidc
And I used the following stack when preparing the…
Hantsy
- 8,006
- 7
- 64
- 109
0
votes
1 answer
Jakarta EE Security - Using Multiple Identity Stores / Passing Requested Role
I have an app with multiple user types (roles), each stored in different tables in the same SQL DB and each has its own login page. To implement this using Jakarta EE 8 security API I see I have two options:
Define multiple IdentityStore's, one for…
DaveB
- 2,953
- 7
- 38
- 60
0
votes
2 answers
Jakarta EE 8 Security > Wildfly 26 Elytron - Role not being set
I am trying to setup a simple JSF login using Jakarta EE 8 Security, I have implemented the login page as a custom form as follows:
@ApplicationScoped
@CustomFormAuthenticationMechanismDefinition(
loginToContinue = @LoginToContinue(
…
DaveB
- 2,953
- 7
- 38
- 60