Developing a custom UserRegistry

[ggam]

I tried to develop a custom UserRegistry but I wasn't able to do it.

There are some articles on ibm.com (https://www.ibm.com/support/knowledgecenter/SS7K4U_liberty/com.ibm.websphere.wlp.zseries.doc/ae/twlp_sec_custmr.html) but they mess a lot with OSGi and I couldn't make it work. A new guide for this topic would be greatly appreciated.

[dmuelle]

Thanks for your feedback @ggam, we are looking into this. I'm researching an alternative solution but waiting on testing.

[dmuelle]

closing this issue, work for a new task topic on this process is being tracked in #2418

[lauracowen]

@ggam Can I ask why you've chosen to write a custom user registry rather than using an existing one in some form? Or did you mean you already have a custom user registry that you want to configure to work with your app on Liberty?

[ggam]

@lauracowen I need to get users from a database and authenticate via both MP JWT or basic auth. I haven't found a way to get users from the DB with the default registries (only LDAP).

I can use Jakarta Security to get the users from the database, but Open Liberty disables MP JWT when Jakarta Security is in place.

[Emily-Jiang]

@ggam I am surprised that your obeservation of "Open Liberty disables MP JWT when Jakarta Security is in place.", which should not be the expected behaviour. When you say Jakarta Security, do you mean Jakarta EE Security such as @RolesAllowed etc? If yes, it should not be case as MP JWT has to rely on that to secure applications. If no, can you explain with more details. If you have github repo to demonstrate this, it will be very much appreciated! Thanks you for reporting this issue!

[Emily-Jiang]

reopened this for further clarification

[Emily-Jiang]

@ggam we are going to close this issue since there is no response from you for nearly a month. Please reopen with the response for the questions listed in this comment.

[ggam]

Hi Emily and sorry for the late reply. I meant former JSR 375. I opened an issue but was told it is working as designed: OpenLiberty/open-liberty#12253 El mié., 9 dic. 2020 19:53, Emily Jiang <[email protected]> escribió:

…

Closed #2284 <#2284>. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#2284 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAQC44D6FTZMDHCKVEWET3TST7BRFANCNFSM4PXVSA7A> .

[c-koell]

@Emily-Jiang I think @ggam described the same issues as we had also before. OpenLiberty/open-liberty#11058
If the HAM is activated the mpJwt Security will be ignored.