Add workaround to allow access from WebSocket server to service layer
Unfortunately, Spring Security cannot easily be used with our WebSocket implementation since connections share a Thread and therefore share a SecurityContext. An AuthenticationToken for WebSocket access to the service layer is created.
Showing
- src/main/java/de/thm/arsnova/security/ApplicationPermissionEvaluator.java 7 additions, 5 deletions.../thm/arsnova/security/ApplicationPermissionEvaluator.java
- src/main/java/de/thm/arsnova/websocket/ArsnovaSocketioServerImpl.java 18 additions, 1 deletion...a/de/thm/arsnova/websocket/ArsnovaSocketioServerImpl.java
Please register or sign in to comment