Issue

• There is a security-domain which uses test.CustomPrincipal which extends org.jboss.security.SimplePrincipal.

  • This is as follows:

  
    <security-domain name="test" cache-type="default">
      <authentication>
        <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule">
          <module-option name="principalClass" value="test.CustomPrincipal"/>
        </login-module>
      </authentication>
    </security-domain>
  
  

  • And, there is an EJB secured under the security-domain. It has the following method:

  
      public Principal getPrincipal() {
          SecurityContext securityContext = SecurityContextAssociation.getSecurityContext();
          if (securityContext == null) {
              return null;
          }
          else {
              return new JBossSecurityContextUtil(securityContext).getUserPrincipal()
          }
      }
  
  

  • When calling from a servlet, it returns CustomPrincipal as expected, but from a standalone client, it returns SimplePrincipal.