search

hantsy / jakartaee10-sandbox

Jakarta EE 10 sandbox
https://hantsy.github.io/jakartaee10-sandbox
Apache License 2.0
12 stars 11 forks source link

QUESTION about command in Wildfly configuration #35

Open moksamedia opened 2 years ago

moksamedia commented 2 years ago

These exampes are super helpful, thanks! Can you tell me what the purpose of this command is for in the wildfly configuration? Why do we need ot disable the integrated JASPI?

                    <commands>
                        <command>/subsystem=undertow/application-security-domain=other:write-attribute(name=integrated-jaspi, value=false)</command>
                        <command>reload</command>
                    </commands>

Thanks for the help!

hantsy commented 2 years ago

I asked some security questions on Wildfly zulip channel, and got the help from the Redhat guys, https://blogs.nologin.es/rickyepoderi/index.php?/archives/198-Using-jakartaee-10-security-OIDC-with-wildfly-27-preview.html

moksamedia commented 2 years ago

Great. Thanks.

hantsy commented 2 years ago

I have tried my example with Keyloack, Auth0, Okta on WildFly. Keycloak and Okta worked well. But I encountered an exception with Auth0. Check: https://github.com/eclipse-ee4j/soteria/issues/325

If you have tried to connect an IDP provider, share your experience on Glassfish(it did not work here), and with Auth0 provider.

moksamedia commented 2 years ago

If you have time to answer one more question, I'd appreciate it. Is the MANIFEST.MF file necessary? My code seems to run find without it (and without the beans.xml file as well.

moksamedia commented 2 years ago

I'll try Auth0 and see if I can get it to work.

hantsy commented 2 years ago

If you have time to answer one more question, I'd appreciate it. Is the MANIFEST.MF file necessary? My code seems to run find without it (and without the beans.xml file as well.

Ignore it. I added due to a warning from WildFly console, but it does not resolve the issue.

hantsy commented 2 years ago

The Auth0 is working now. I have to setup the jwksReadTimeout value(increase the value) to make it work(maybe it is network issue from my side).