RFR: 8077155: LoginContext Subject ignored by jdk8 sun.net.www.protocol.http.HttpURLConnection
Rob McKenna
rob.mckenna at oracle.com
Wed May 20 12:59:37 UTC 2015
Gah, sorry, should have paid more attention to the original change:
http://cr.openjdk.java.net/~robm/8077155/webrev.02/
-Rob
On 20/05/15 13:34, Michael McMahon wrote:
> Rob,
>
> There are a few more places where the same limited doPrivileged call occurs
> in HttpURLConnection and which need the same change.
>
> Michael
>
> On 20/05/15 13:24, Rob McKenna wrote:
>> Hi folks,
>>
>> Looking for a review of this webrev:
>>
>> http://cr.openjdk.java.net/~robm/8077155/webrev.01/
>>
>> Basically the subjects credentials are not available to
>> HttpURLConnection.getInputStream0 since it now runs in a doPrivileged
>> block. Changing that to doPrivilegedWithCombiner allows
>> getInputStream0 access to the AccessControlContext's DomainCombiner
>> and the subjects associated credentials.
>>
>> -Rob
>
More information about the net-dev
mailing list