[GraalJS] Need to add @HostAccess.Export for custom adaptive authentication functions

wso2 / product-is

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.

http://wso2.github.io/

Apache License 2.0

748 stars 729 forks source link

[GraalJS] Need to add @HostAccess.Export for custom adaptive authentication functions #20613

Open dewniMW opened 4 months ago

dewniMW commented 4 months ago

In IS when the default script engine is changed to GraalJS, for custom adaptive authentication functions that are written it is required to add @HostAccess.Export. This needs to be documented in the migration docs with the next IS release.

shanggeeth commented 2 weeks ago

Alternatively they can use other script engines without the need for the above mentioned code level change.

If Identity Server is run with Java 17,
```
[AdaptiveAuth]
ScriptEngine = "openjdkNashorn"
```
In addition we need to run adaptive.sh script to download the required dependencies for OpenJDK Nashorn as documented in https://is.docs.wso2.com/en/latest/deploy/enable-adaptive-authentication/
If Identity Server is run with Java 11,
```
[AdaptiveAuth]
ScriptEngine = "nashorn"
```