WildFly Elytron

Sending Request Objects as A JWT Using Request Parameters for OIDC

How to send the request object as a Json Web Token when securing a WildFly application using OIDC.

Caching realm now automatically tries to authenticate users with the underlying realm if authentication with cached credentials fails

Caching realm will now attempt to authenticate users with the underlying realm if credential verification with the cached credentials fails.

Securing a WildFly Application Using OpenID Connect With Additional Scope Values

How to secure a WildFly application deployed to OpenShift with OpenID Connect using additional scope values.

Trying Out An Upcoming Security Feature for WildFly on OpenShift

How to deploy a wildfly app on OpenShift using an upcoming feature that introduces the ability to add additional scope values when securing applications using OpenID Connect.

Using Certificate Based Authentication with Mutual TLS without Roles

How to secure a web application deployed to WildFly with mutual TLS and the CLIENT_CERT HTTP authentication mechanism.

Normalize principal propagation/injection across elytron and legacy

An overview of the new configuration option in the EJB subsystem that allows to switch between legacy and elytron principal propagation

Using Elytron certificate-based authentication with authorization

This blog post describes how to secure a web application deployed to WildFly using the CLIENT_CERT HTTP authentication mechanism with two-way SSL and authorization.

HTTP Basic Authentication in silent mode with Wildfly Elytron

How to set and make use of silent mode for the HTTP BASIC authentication mechanism.

Using WildFly Elytron with the Netty HttpServerCodec

An introduction as to how WildFly Elytron could be used with Netty.

Using WildFly Elytron with Undertow Standalone

Although developed for use within the WildFly application server the WildFly Elytron project can also be used in isolation, this blog post demonstrates how it can be used to secure an embedded Undertow server.