RFR: 8077155: LoginContext Subject ignored by jdk8 sun.net.www.protocol.http.HttpURLConnection

Michael McMahon michael.x.mcmahon at oracle.com
Wed May 20 12:34:50 UTC 2015


Rob,

There are a few more places where the same limited doPrivileged call occurs
in HttpURLConnection and which need the same change.

Michael

On 20/05/15 13:24, Rob McKenna wrote:
> Hi folks,
>
> Looking for a review of this webrev:
>
> http://cr.openjdk.java.net/~robm/8077155/webrev.01/
>
> Basically the subjects credentials are not available to 
> HttpURLConnection.getInputStream0 since it now runs in a doPrivileged 
> block. Changing that to doPrivilegedWithCombiner allows 
> getInputStream0 access to the AccessControlContext's DomainCombiner 
> and the subjects associated credentials.
>
>     -Rob



More information about the net-dev mailing list