Questions tagged [open-liberty]

Open Liberty is a highly composable, fast to start, dynamic application server runtime environment distributed under the EPLv1 license.

This tag is specifically for questions relating to the Open Liberty.

Developer download links

Forum links

More resources

456 questions
0
votes
1 answer

How to create authorization roles from OIDC token in WebSphere Liberty server application using social login feature?

I am trying to implement role based authorization in an application running on WebSphere / Open Liberty server. Authentication is implemented using OIDC token & socual-login feature & it is workig fine. I am struggling to create roles from JWT token…
0
votes
1 answer

Environment variable in Jenkinsfile

We are trying to use ${server.config.dir} in jvmOptions -Djava.security.auth.login.config=${server.config.dir}/kerberos/client_jaas.conf Can we set this as part of Jenkins environment variables? We did it like this- environment { …
0
votes
0 answers

Why are groups not being mapped to roles consistently with MP-JWT?

I've been experiencing some unusual behavior when using MP-JWT authorization in OpenLiberty. I have a single role ("apiuser") that I'm using for secured resources which gets included in the "groups" claim in the JWT. Most of the time this works as…
0
votes
1 answer

Liberty on Kubernetes: best way to restart server short of a pod restart?

This is related to another question about system properties. In that question, I make the offhand comment: It seems to me you'd need to send a UNIX signal (SIGINT maybe?) to Open Liberty to cause it to restart. I am breaking this comment out into…
edburns
  • 482
  • 1
  • 4
  • 13
0
votes
2 answers

DistributedMap feature: how to use it

How to use the Liberty's distributedmap feature in a Java application? Where I can find the required Maven dependencies (com.ibm.websphere.cache..)?
Gualtiero Testa
  • 244
  • 1
  • 3
  • 8
0
votes
1 answer

Notion of sslDefault in openliberty config for third party library or JDK and best practices

I need to define a custom SSL configuration in server.xml and use it as default in my openliberty server. What is the impact of defining sslDefault in server.xml config. Will this override the JVM default and all third party libraries will…
Manudebouc
  • 45
  • 4
0
votes
0 answers

How to get enabled cipher list defined in a named ssl config?

I have a ssl config named MY_SSL_CFG defined in my server.xml where I specify one cipher list. I want to refer it using JSSEHelper.getInstance().getSSLContext("MY_SSL_CFG", Collections.emptyMap(), null) and use in code to configure a library. Using…
Manudebouc
  • 45
  • 4
0
votes
0 answers

Unit / Integration tests not running on openliberty

I have a legacy websphere EE7 app I am attempting to convert to run on openliberty. It now seems to run on openliberty which is great. However the integration tests do not seem to run. They hot compile, but do not run. The application is deployed as…
John Deverall
  • 5,954
  • 3
  • 27
  • 37
0
votes
1 answer

Mixing microProfile-5.0 and Jakarta EE 9.1 messaging features in Liberty

Migrating server from microProfile-4.1 to microProfile-5.0 and based on https://openliberty.io/blog/2021/11/26/jakarta-ee-9.1.html, I map wasJmsClient-2.0 to messagingClient-3.0 and wasJmsServer-1.0 to messagingServer-3.0.
Manudebouc
  • 45
  • 4
0
votes
1 answer

Run task asynchronously: ManagedExcecutorService vs Microprofile fault tolerance @Asynchronous

I want to run an asynchronous task in a JavaEE openliberty environment. Ideally the task has to run at startup, but I don't want that it blocks the startup of the WAR module itself. Also, I don't want that on failure it prevents the whole…
finrod
  • 521
  • 8
  • 21
0
votes
1 answer

Spring Boot Authentication succeeds with embedded Tomcat, but returns 403 with Open/WAS Liberty

I use Spring Security to authenticate/authorize against Active Directory. Below code works just fine if I run it in Spring embedded Tomcat. But when I switch to Open/WAS Liberty server, I get 403 on authenticate (/auth endpoint): My…
pixel
  • 9,653
  • 16
  • 82
  • 149
0
votes
0 answers

In liberty, OIDCclient does not include CORS headers

I have a bff running in Liberty (https://localhost:9443), secured it with oidcclient, and configured it with cors to allow its SPA frontend to consume it, from a different origin (https://localhost:3000). I also enabled liberty's sso by setting a…
Kuper
  • 23
  • 4
0
votes
1 answer

WLP and OpenLiberty prevent me to use LtpaToken2 cookie name

I am planning to implement SSO w/OIDC between several identical Websphere Liberty profile (wlp) instances with the standard LtpaToken2 cookie, but I don't see it being generated under that name. Instead, I see a random WAS_* cookie. Even when I set…
Kuper
  • 23
  • 4
0
votes
3 answers

With Open Liberty, how to use an environment variable as an application property?

I expected to be able to do something like this in my server.xml, but I could not get it to work: Setting it in jvm.options or server.env do not seem to be options either from what I can tell.…
Rb C
  • 21
  • 4
0
votes
1 answer

Detect closed Server-Sent Event clients in Jakarta EE

I'm trying to establish an SSE communication channel between a Jakarta EE server and other web or Java clients. In order to send messages to such clients, I keep a list of them as internal server state. The problem is, I can't find a way to detect…
DanielM
  • 1,106
  • 3
  • 17
  • 27