Exception starting filter CrowdSecurityFilter

[Roel Croonenberghs]

I try to authenticate my own application against the in JIRA embedded crowd.

I put the CrowdSecurityFilter filter in my web.xml but it fails to start my application with the following error.

SEVERE: Exception starting filter CrowdSecurityFilter
java.lang.InstantiationException: com.atlassian.crowd.integration.http.filter.CrowdSecurityFilter
    at java.lang.Class.newInstance0(Class.java:340)
    at java.lang.Class.newInstance(Class.java:308)
    at org.apache.catalina.core.DefaultInstanceManager.newInstance(DefaultInstanceManager.java:140)
    at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:258)
    at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:105)
    at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:4809)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5485)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1559)
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1549)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
    at java.util.concurrent.FutureTask.run(FutureTask.java:138)
    at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
    at java.lang.Thread.run(Thread.java:662)
12-okt-2015 13:29:37 org.apache.catalina.core.StandardContext startInternal
SEVERE: Error filterStart

This is what I have in my web.xml

<filter>
        <filter-name>CrowdSecurityFilter</filter-name>
        <filter-class>com.atlassian.crowd.integration.http.filter.CrowdSecurityFilter</filter-class>
    </filter>
     
    <filter-mapping>
        <filter-name>CrowdSecurityFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

Any ideas what I am doing wrong or missing?

[crf]

I don't know the full answer from direct experience, but here's what I can tell about what's happening:

1. You're getting an InstantiationException because the web.xml filter definitions assume that they can use a default constructor. The CrowdSecurityFilter does not have a default constructor so it cannot be used that way. It needs to be provided with a CrowdHttpAuthenticator as well as an AuthenticationUrlProvider (which it can obtain from ClientProperties).
2. This documentation is probably your best best for learning the right way to do this: https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+a+Custom+Application — For the most part, applications do not need to know whether it is really Crowd or JIRA as a Crowd Server (JaaCS) that they are talking to, as the client-side code is configured in essentially the same way.

[Roel Croonenberghs]

I'm doing things descibe on https://developer.atlassian.com/display/CROWDDEV/Java+Integration+Libraries If I remove the filter, then the calls I make to retrieve group information are successful. But I want it to be a SSO application. And therefore I need the username from the current session. And to what I have read on the internets, that is only possible with the CrowdSecurityFilter. I' ve done this on crowd 2.2.7 and then it works. But the classes are a little different because that is an old version. See https://developer.atlassian.com/display/CROWDDEV/Crowd+2.1+REST+Java+Client+Migration+Guide