I have recently inherited an application which is currently using a few app level valves to perform a few different security and authentication related functions. There is a new global valve we're rolling out to all of our app servers to handle a new corporate wide authentication requirement. Does anyone have any experience mixing Global and App valves, any gotchas, or information as to order of execution, etc? In the JBoss documentation it references both, but doesn't give any insight into have they play with each other. I see from https://access.redhat.com/solutions/711483 that multiple global valves can't be ordered and if ordering is required they suggest changing to app valves. I believe no other teams use app level valves which is why it was decided to go with a global approach.
Thanks for any insight!