30 questions
0
votes
1
answer
1k
views
Unable to upgrade OPENSAML to 5.1.2 from 2.5.3
I need to upgrade OPENSAML to 5.1.2 from 2.5.3 to support Java 17 as our project has been upgraded to Java 17. While I try to upgrade OPENSAML I am facing issues which are listed below
OPENSAML-5.1.2 ...
- 196
0
votes
1
answer
192
views
@OpenIdAuthenticationMechanismDefinition : redirectToOriginalResource = true generates NullPointerException
I'm playing with OpenID Connect (using Keycloak 22.0.1) and Jakarta Faces (wildfly 29.0.1.Final with integrated JASPI at false). Here is my definition :
@OpenIdAuthenticationMechanismDefinition(
...
- 775
2
votes
1
answer
237
views
@OpenIdAuthenticationMechanismDefinition with wildfly : Principal is anonymous
I'm trying to use the java-ee-kickoff-app (https://github.com/javaeekickoff/java-ee-kickoff-app) with openid.
I'm using keycloak 26.0.5 and wildfly 29.0.1.Final (integrated-jaspi is false).
I created ...
- 775
1
vote
1
answer
67
views
@RolesAllowed in Apache CXF
I'm trying to migrate a JAX-RS application from Jersey to Apache CXF. I'm not using Spring, so I'm trying to configure it by extending javax.ws.rs.core.Application.
I also implemented
public class ...
- 21.5k
1
vote
0
answers
99
views
Jakarta Security documentation for RESTful Web Services application
I'm trying to implement authentication on a Jakarta RESTful (Edit: Jakarta EE 9.1 running in a TomEE WebProfile 9.1.x) application using Jakarta Security specification.
I first tried using the @...
- 159
2
votes
1
answer
133
views
Response 403 forbidden at simultaneously ajax request using Jakarta EE and Glassfish Server
I have a Jakarta-based web app deployed in Glassfish 7.0.16. Currently, I'm implementing Jakarta Security with user-role from DB. That works fine until the client-side execute multiple ajax requests ...
3
votes
1
answer
169
views
@LdapIdentityStoreDefinition read bindDnPassword from environment variable or property file in WildFly
I am having a challenging time achieving a security common pattern of loading secrets from an environment variable or a properties file. I am tring to load the password of an openLDAP admin user in ...
- 1,889
0
votes
2
answers
202
views
Keycloack and Wildfly, connection closed after access token lifespan
I created a web application with Wildfly 30 (Jakarta EE10). Authentication works with Keycloak.
I use the annotation:
@OpenIdAuthenticationMechanismDefinition(
providerURI = "${...
- 499
0
votes
0
answers
199
views
Redirect user based on his Role in Jakarta EE web app
I have Jakarta EE 10 web application with CustomFormAuthenticationMechanismDefinition. My web.xml setting:
<welcome-file-list>
<welcome-file>app/index.xhtml</welcome-file>
</...
- 191
1
vote
0
answers
162
views
Why identityStoreHandler is null?
This is my JWTAuthenticationMechanism :
package xxx;
import io.jsonwebtoken.ExpiredJwtException;
import jakarta.enterprise.context.ApplicationScoped;
import jakarta.security.enterprise....
- 359
0
votes
1
answer
112
views
How do I restrict acces to all my APIs to one user role and only allow other on a few of them in JAX-RS?
This is my Jersey Application Config:
@ApplicationPath("/ui/v1.0")
@RolesAllowed("admin")
public class AppConfig extends ResourceConfig {
public AppConfig() {
System....
- 5,529
0
votes
0
answers
81
views
RolesAllowedDynamicFeature not invoked in Jersey
My Jakarta Application class is:
@ApplicationPath("/app")
@RolesAllowed("admin")
public class Application extends ResourceConfig {
public Application() {
System.out....
- 5,529
1
vote
1
answer
299
views
How to use EL in extraParameters attribute of the @OpenIdAuthenticationMechanismDefinition?
I have a problem with defining parameters for an @OpenIdAuthenticationMechanismDefinition annotation introduced in the jakarta-ee-security-api of Jakarta EE 10. My goal is to understand the correct ...
- 4,977
2
votes
0
answers
488
views
Jakarta EE 10 - OIDC and Programatic Login?
Since Jakarta EE 10 it is easily possible to protect your web application with OpenID Connect, using the new @OpenIdAuthenticationMechanismDefinition annotation.
This works perfect and is quite easy ...
- 4,977
3
votes
2
answers
1k
views
How to use OIDC in Jakarta EE?
I have the requirement to protect my existing Jakarta EE application with an OpenID provider in one of many different environments.
When searching about this topic you will find the @...
- 4,977