Claus Ibsen created CAMEL-25994:
-----------------------------------
Summary: camel-undertow - WebSocket: keep the OAuth validation of
a connection per endpoint, like the other security checks
Key: CAMEL-25994
URL: https://issues.apache.org/jira/browse/CAMEL-25994
Project: Camel
Issue Type: Bug
Components: camel-undertow
Reporter: Claus Ibsen
Fix For: 4.24.0, 4.22.3
{{CamelWebSocketHandler}} records, for each WebSocket connection, which
endpoints of the path the handshake was checked against: the security provider,
the allowed roles and the custom handlers of a consumer are all kept per
endpoint URI. The result of the {{oauthProfile}} validation is kept on the
connection without the endpoint that did the validation, so later checks of an
open connection only see that some OAuth validation happened.
*Proposed change*: record the OAuth validation per endpoint, like the other
checks, and check an open connection against the endpoints whose settings
currently apply to the path. Add tests where the consumer of a path changes
while connections are open.
_Claude Code on behalf of davsclaus_
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
