Allow two stars as rolename as described in servlet spec

quarkusio · Apr 24, 2024 · ae64f2c · ae64f2c
1 parent fb4963a
commit ae64f2c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...s/undertow/deployment/src/main/java/io/quarkus/undertow/deployment/UndertowBuildStep.java b/...s/undertow/deployment/src/main/java/io/quarkus/undertow/deployment/UndertowBuildStep.java
@@ -550,7 +550,7 @@ public ServletDeploymentManagerBuildItem build(List<ServletBuildItem> servlets,
                 if (constraint.getAuthConstraint() == null) {
                     // no auth constraint means we permit the empty roles
                     securityConstraint.setEmptyRoleSemantic(PERMIT);
-                } else if (roleNames.size() == 1 && roleNames.contains("*")) {
+                } else if (roleNames.size() == 1 && (roleNames.contains("*") || roleNames.contains("**"))) {
                     securityConstraint.setEmptyRoleSemantic(AUTHENTICATE);
                 } else {
                     securityConstraint.addRolesAllowed(roleNames);