Questions tagged [security-context]

104 questions
0
votes
0 answers

Spring SecurityContext in Async Controller Response

According to WebAsyncManager documentation, An async scenario starts with request processing as usual in a thread (T1). Concurrent request handling can be initiated by calling startCallableProcessing or startDeferredResultProcessing, both of which…
0
votes
1 answer

Send ZIP file to a REST based API which is using SSL TLS (https) hosted on AWS from a flutter based mobile application

Previously I created a REST API which was taking a ZIP file and two other parameters as input from the flutter mobile application var uri = Uri.parse("http://XX.XXX.XX.XX/gatewayapp/userinfo/sendFileToServer/"); var request =…
NowRam
  • 150
  • 2
  • 5
0
votes
1 answer

K8S: Pass the runAsUser permission to files created inside container

Let's say I have the below yaml: spec: securityContext: fsGroup: 5678 serviceAccountName: some-account volumes: - name: secrets secret: secretName: data-secrets - name: secrets-sftp-passwd-key secret: …
user1452759
  • 8,810
  • 15
  • 42
  • 58
0
votes
1 answer

Can a sidecar container of a pod detect the user of the application container and use the same?

I have defined a sidecar container in a common.tpl file in my helm charts. This sidecar container is included in numerous pods in which different users are used. I was wondering if there is a way to define as user in the sidecar container the user…
0
votes
0 answers

How to deal with certificate files when making API calls from Flutter App?

I have a Flutter Application that makes HTTP requests to an API I've hosted on my server. My API is behind a secure connection (with SSL certificate) and i want my App to make HTTPS requests so the connection is secure. I've read in this answer…
0
votes
0 answers

Reset generate jwt token and update spring security context

I am having the situation needing to reset/update security context, maybe jwt. My project is microservice, spring cloud/oauth2/zuul…. The case is user's email has been stored in jwt once login. The email can be edited by one service, say identity…
0
votes
0 answers

How To Get Data From Https Server in Dart

i was building a flutter application and i need to get JSON data from a https server. but i getting error like this Error: HandshakeException: handshake error in client(OS ERROR: CERTIFICATE_VERIFIY_FAILED: self signed certificate My ApiServices…
Muhammad Faisal
  • 137
  • 2
  • 2
  • 12
0
votes
0 answers

How to impersonate logged on user?

I need to impersonate logged on user. It's required because of ps security context. Let me explain. I have one win service. And one dll library with whole logic. And two different clients(.exe and ps) which use this service via dll. When I start…
isxaker
  • 8,446
  • 12
  • 60
  • 87
0
votes
1 answer

Linked server objects security model

I need to lock down access to a linked server object in MSSQL server. I am building views on a host database, from which, I query to populate a staging table on my warehouse server. I am using Data Tools/SSIS to extract the view data. To simplify…
0
votes
1 answer

Jersey I can't authorize the user when uploading files

In default functions I can use ContainerRequestContext requestCtx to get the securitycontext and username from the request. But for some reason when using this in a function that consumes MediaType.MULTIPART_FORM_DATA I'm getting this error:…
Stefan
  • 981
  • 1
  • 9
  • 19
0
votes
3 answers

Java Spring is not clear about what should one expect from getDetails of SecurityContext

How would I know for sure what the following line would return today and in future versions of Spring? I didn't find documentation about this. How can I know for sure what would Spring decide to assign to this…
0
votes
0 answers

Oracle: How to programmatically check if a user has a given resource assigned to it?

I have a use case where I want to test if a user has a particular resource assigned to him. I am using below code but it returns false, even if the user has that resource. public static boolean isUserGrantedResource() { String resource =…
0
votes
1 answer

InitializeSecurityContext (Schannel) not changing BufferType

So i have following code: SecBuffer input_buffers[2]; SecBuffer output_buffers[2]; ULONG context_attributes; /* we need to try and perform the second (next) step of the init */ input_buffers[0].cbBuffer =…
0
votes
0 answers

Jetty: Authentication with security realms - HTTP ERROR 401 Unauthorized

I’m trying to create a simple web app with jersey, jetty embedded and SecurityContext with BASIC authentication, the reaml gets the user's data from a properties file on /tmp/realm.properties. It seems that the properties file is not read for any…
vJos
  • 131
  • 1
  • 2
  • 12
0
votes
1 answer

SecurityUser in Async Spring Listeners

I am facing a problem and hope that someone can give me some advice. I have a restful Spring application which allows HTTP-requests. I am using spring security and offer oauth2. In my basic service, called by a controller, I am fetching the…
myself
  • 63
  • 5