|
I am encountering this same issue with Jetty. Jetty does authentication per request and does not use ThreadLocals therefore the org.jboss.weld.security.spi.SecurityServices interface is inapplicable as-is. the Weld Servlet Extension would need to register a servlet filter at startup and capture the userPrincipal() in a ThreadLocal for future reference so that it can be injected in a @RequestScoped bean. I think this user principal servlet filter could be done similar to the ConversationFilter and would work for both Jetty and Tomcat.
|