Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

When debugging through the Interceptor over the Core protocol, I noticed there was very minimal or no security information inside both the Packet and RemotingConnection objects. The Packet only had information regarding the message, the address of the message, and other small details of the packet depending on its type. No security information was present in the Packet. The RemotingConnection had low level details about the connection, including the IP of the broker and the protocol used, but no security information was present regarding the connection. The interface of the RemotingConnection object however does expose a getSubject method, but its implementation just returns null. A pull request to Artemis would be necessary in order to implement getSubject and attach the subject to the Packet.

Decision

Decided to contribute an improvement to Artemis upstream.

https://github.com/apache/activemq-artemis/commit/86a2cad12ac77cc50ff5841c87d5d15865f983c3

Artemis security plugins can now be developed downstream of DDF.