X-Git-Url: http://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Fauth%2FRemoteAuthUtils.java;h=af4b5379c8383712c1e8870b13fc8e2e4c897874;hb=HEAD;hp=3c436ba1fc40edd772e161d65ea1c70bc5f39cea;hpb=55870eba50d8b28e72a3102fd18a17a6f23f7bad;p=lgpl%2Fargeo-commons.git diff --git a/org.argeo.cms/src/org/argeo/cms/auth/RemoteAuthUtils.java b/org.argeo.cms/src/org/argeo/cms/auth/RemoteAuthUtils.java index 3c436ba1f..af4b5379c 100644 --- a/org.argeo.cms/src/org/argeo/cms/auth/RemoteAuthUtils.java +++ b/org.argeo.cms/src/org/argeo/cms/auth/RemoteAuthUtils.java @@ -46,39 +46,8 @@ public class RemoteAuthUtils { public final static T doAs(Supplier supplier, RemoteAuthRequest req) { CmsSession cmsSession = getCmsSession(req); return CurrentSubject.callAs(cmsSession.getSubject(), () -> supplier.get()); -// ClassLoader currentContextCl = Thread.currentThread().getContextClassLoader(); -// Thread.currentThread().setContextClassLoader(RemoteAuthUtils.class.getClassLoader()); -// try { -// return Subject.doAs( -// Subject.getSubject((AccessControlContext) req.getAttribute(AccessControlContext.class.getName())), -// new PrivilegedAction() { -// -// @Override -// public T run() { -// return supplier.get(); -// } -// -// }); -// } finally { -// Thread.currentThread().setContextClassLoader(currentContextCl); -// } } -// public final static void configureRequestSecurity(RemoteAuthRequest req) { -// if (req.getAttribute(AccessControlContext.class.getName()) != null) -// throw new IllegalStateException("Request already authenticated."); -// AccessControlContext acc = AccessController.getContext(); -// req.setAttribute(REMOTE_USER, CurrentUser.getUsername()); -// req.setAttribute(AccessControlContext.class.getName(), acc); -// } -// -// public final static void clearRequestSecurity(RemoteAuthRequest req) { -// if (req.getAttribute(AccessControlContext.class.getName()) == null) -// throw new IllegalStateException("Cannot clear non-authenticated request."); -// req.setAttribute(REMOTE_USER, null); -// req.setAttribute(AccessControlContext.class.getName(), null); -// } - public static CmsSession getCmsSession(RemoteAuthRequest req) { CmsSession cmsSession = (CmsSession) req.getAttribute(CmsSession.class.getName()); if (cmsSession == null)