topic A valid SecureContext was not provided when using SiteServic in Alfresco Archive

A valid SecureContext was not provided when using SiteServic

amitev — Mon, 18 Apr 2011 15:20:09 GMT

Hi. I when I call SiteService to get the site for a specific node, I get the following exception:Caused by: net.sf.acegisecurity.AuthenticationCredentialsNotFoundException: A valid SecureContext was not provided in the RequestContext at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.cr

Re: A valid SecureContext was not provided when using SiteServic

mrogers — Mon, 18 Apr 2011 16:23:30 GMT

Not without more information… :?

What's calling the site service and how is it being done.

Re: A valid SecureContext was not provided when using SiteServic

andy — Mon, 18 Apr 2011 18:31:23 GMT

Hi

Which version of Alfresco are you using?

This means a publc service method has been called that does not have any security definition.
The next call actually blows up ….

Later versions of Alfresco have a catch all definition to avoid this.Something like

org.alfresco.service.cmr.repository.NodeService.*=ACL_DENY‍

in public-services-security-context.xml.

Please provide the stack trace.

Andy

Re: A valid SecureContext was not provided when using SiteServic

amitev — Tue, 19 Apr 2011 06:57:00 GMT

It was thrown in a webscript (child of DeclarativeWebScript).
Looks like <authentication>user</authentication> tag was missing in the desc.xml. Now it's working. Thank you very much for the help!

Re: A valid SecureContext was not provided when using SiteServic

amitev — Tue, 19 Apr 2011 07:01:56 GMT

It would be useful if Alfresco provides a more specific exception messages to help developers quickly solve their problems.

Re: A valid SecureContext was not provided when using SiteServic

mrogers — Tue, 19 Apr 2011 07:14:13 GMT

Indeed, but the way to do this is to raise enhancement requests in JIRA or submit a contribution yourself. And please be specific, raising a vague wide ranging requests will not help.

In this specific case the exception message is probably as good as it can get since the secutity service does not know why there is no security context. But if you have suggestions on how it can be improved then please raise in JIRA.

Re: A valid SecureContext was not provided when using SiteServic

andy — Tue, 19 Apr 2011 18:42:31 GMT

Hi

This kind of stuff will get fixed when we move/upgrade to SpringSecurity. Until then there is not much point.
It is not possible to wrap this exception for all use cases.
However, not authenticating and calling a puiblic service should porbably throw something better.

Andy