-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
With disabled proactive sec., only create sec. identity when required #28061
With disabled proactive sec., only create sec. identity when required #28061
Conversation
daa56db
to
1830cb8
Compare
This comment has been minimized.
This comment has been minimized.
Sorry about cancelled workflow run, I'll be more careful. |
Hi Stuart @stuartwdouglas I think it is the correct solution, but double check please if you get a chance |
This comment has been minimized.
This comment has been minimized.
|
I've just merged the PR which adds a few more log messages. Unfortunately something strange is going on with the refresh token tests. Can you please rebase and have this build run again ? It is most likely unrelated but this change a very sensitive change, so we need to be 100% certain, and as it happens these tests run with the proactive authentication disabled, thanks |
1830cb8
to
76f2aa4
Compare
@sberyozkin sure, done, let see |
Failing Jobs - Building 76f2aa4
Full information is available in the Build summary check run. Failures⚙️ Devtools Tests - JDK 11 #- Failing: integration-tests/devtools
📦 integration-tests/devtools✖
✖
✖
✖
⚙️ Devtools Tests - JDK 17 #- Failing: integration-tests/devtools
📦 integration-tests/devtools✖
✖
✖
✖
⚙️ Gradle Tests - JDK 11 Windows #- Failing: integration-tests/gradle
📦 integration-tests/gradle✖
✖
⚙️ JVM Tests - JDK 11 Windows #- Failing: integration-tests/opentelemetry-reactive
📦 integration-tests/opentelemetry-reactive✖
|
@michalvavrik So that was that random test failure not related to this PR and the test failures here are not related so I think we can merge, @stuartwdouglas - ping us please if you'll have some concerns |
fixes: #27316
When proactive security is disabled (
quarkus.http.auth.proactive=false
), security identity is only created (or more specifically,io.quarkus.vertx.http.runtime.security.HttpAuthenticator#attemptAuthentication
is only called) when required. This behavior is expected by user (see linked issue) and was described here #27316 (comment) by @sberyozkin.Added test
io.quarkus.vertx.http.security.DisabledProactiveSecIdentityProviderTest#testAuthenticationIsNotAttempted
would fail prior to this PR (tested).