Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-20504

(7.3.z) ELY-2040 - ServiceLoader discovery of security Providers discovers JDK instances as well

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Can't Do
    • Icon: Major Major
    • None
    • None
    • Security
    • None
    • False
    • False
    • Closing JBEAP issue since we don't have a customer case and upstream issue is pending investigation.

      Recently working with the Zulu JDK we realised our use of ServiceLoader discovery is loading both the services defined in META-INT/services and those defined in the JPMS of the JDK.

      The issue MODULES-402 is adding an API to JBoss Modules to allow filtering before Providers are instantiated and WFCORE-5185 is to look at filtering in the Elytron subsystem.

      This issue is to look at the options in the following class:
      org.wildfly.security.provider.util.ProviderServiceLoaderSupplier

      In the subsystem we know we are in a modular environment so can check the type of the ClassLoader but for ProviderServiceLoaderSupplier we may be in a client not using JBoss Modules so may need to review alternative filtering strategies. In the client it is even more likely that JPMS definitions may be desirable so this will need to be considered further.

            rhn-support-ivassile Ilia Vassilev
            rhn-support-ivassile Ilia Vassilev
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: