RFR: 8077155: LoginContext Subject ignored by jdk8 sun.net.www.protocol.http.HttpURLConnection

Weijun Wang weijun.wang at oracle.com
Wed May 20 14:37:48 UTC 2015


Hi Rob

The src change is good.

As for the test, this line will return the Subject you want

    Context.fromUserPass(WEB_USER, WEB_PASS, false).s()

Thanks
Max


On 5/20/2015 8:24 PM, Rob McKenna wrote:
> Hi folks,
>
> Looking for a review of this webrev:
>
> http://cr.openjdk.java.net/~robm/8077155/webrev.01/
>
> Basically the subjects credentials are not available to
> HttpURLConnection.getInputStream0 since it now runs in a doPrivileged
> block. Changing that to doPrivilegedWithCombiner allows getInputStream0
> access to the AccessControlContext's DomainCombiner and the subjects
> associated credentials.
>
>      -Rob


More information about the net-dev mailing list