Details
-
Type:
Bug
-
Status: Resolved (View Workflow)
-
Priority:
Major
-
Resolution: Done
-
Affects Version/s: 3.0.0.Final
-
Fix Version/s: 3.1.0.Beta1
-
Labels:None
-
Git Pull Request:
Description
The design of the Security External module depends on undefined behaviour of alternatives. It defines alternatives (*ApplicationScopeProducer and *VirtualApplicationScopeProducer) in the module and expects the application to set the alternatives in its beans.xml, which isn't supported by CDI spec (see CDI-18) and doesn't seem to work anywhere except JBoss AS 6.
We should probably just remove the Producers and make the beans @ApplicationScoped directly. Users interested in changing the scope of those beans could still use Seam Config for that.
Gliffy Diagrams
Issue Links
- incorporates
-
SEAMSECURITY-47
security-openid-rp - fails to deploy on GlassFish
-
- Resolved
-
Activity
- All
- Comments
- Work Log
- History
- Activity
- Links Hierarchy
fixed
All the *ScopeProducers (such as OpenIdProviderInVirtualApplicationScopeProducer, OpenIdProviderInApplicationScopeProducer, ...) are @Vetoed, and to enable the specific producer, you now have to use, e.g.:
<idp:SamlIdpInApplicationScopeProducer>
<s:modifies/>
</idp:SamlIdpInApplicationScopeProducer>
in seam-beans.xml