RFR: 8077155: LoginContext Subject ignored by jdk8 sun.net.www.protocol.http.HttpURLConnection
Michael McMahon
michael.x.mcmahon at oracle.com
Wed May 20 12:34:50 UTC 2015
Rob,
There are a few more places where the same limited doPrivileged call occurs
in HttpURLConnection and which need the same change.
Michael
On 20/05/15 13:24, Rob McKenna wrote:
> Hi folks,
>
> Looking for a review of this webrev:
>
> http://cr.openjdk.java.net/~robm/8077155/webrev.01/
>
> Basically the subjects credentials are not available to
> HttpURLConnection.getInputStream0 since it now runs in a doPrivileged
> block. Changing that to doPrivilegedWithCombiner allows
> getInputStream0 access to the AccessControlContext's DomainCombiner
> and the subjects associated credentials.
>
> -Rob
More information about the net-dev
mailing list