Replace "weblogic.security.Security.getCurrentSubject()"

Question

In weblogic,we can use "weblogic.security.Security.getCurrentSubject()" method
to get a javax.security.auth.Subject object,this object contains the security
information of the current user that call this method."Security.getCurrentSubject()"
is a static method and has no parameter,so it's easy for us to get the security
information anywhere.
But this API is provided by BEA weblogic,it's not a standard J2EE API,so it's
hard for me to change the APP Server to others like WebSphere or Oracle IAS.
Another way is use getUserPrincipal() of HttpRequest and getCallerPrincipal()
of EJBContext,but these two methods need a reference to the HttpRequest object
and EjbConext object,and is restrict use in Servlet and EJB,hard to use in normal
java classes.
I want to find a standard J2EE API to do the same thing,can anyone help me?
Any suggestion is welcome.
thanks

Answer 1

J2EE provides no standard way of getting the current Subject. In WebLogic
the Subject returned by Subject.getSubject(AccessController.getContext()) is
not necessarily the same as the current user.
- Neil
"Lloyd Fernandes" <[email protected]> wrote in message
news:3ffd46f1$[email protected]..
>
"Jason Shi" <[email protected]> wrote:
I have try this method,but the return subject is null.
"Lloyd Fernandes" <[email protected]> wrote:
"Jason Shi" <[email protected]> wrote:
In weblogic,we can use "weblogic.security.Security.getCurrentSubject()"
method
to get a javax.security.auth.Subject object,this object contains the
security
information of the current user that call this
method."Security.getCurrentSubject()"
is a static method and has no parameter,so it's easy for us to getthe
security
information anywhere.
But this API is provided by BEA weblogic,it's not a standard J2EE
API,so
it's
hard for me to change the APP Server to others like WebSphere or Oracle
IAS.
Another way is use getUserPrincipal() of HttpRequest andgetCallerPrincipal()
of EJBContext,but these two methods need a reference to the HttpRequest
object
and EjbConext object,and is restrict use in Servlet and EJB,hard touse
in normal
java classes.
I want to find a standard J2EE API to do the same thing,can anyone
help
me?
Any suggestion is welcome.
thanks
Subject.getSubject(AccessController.getContext());
- lloyd
I noticed that too. I have escalated it to weblogic. Hopefully I will getan answer
in a couple of days.