Java callout failed due to access denied ("java.net.NetPermission" "getProxySelector") in apigee edge

[fechen]

Hi, I am creating a java callout run in apigee edge which failed due to access denied. Any help on how to bypass this? Thanks so much

Below is the stacktrace.

java.security.AccessControlException: access denied ("java.net.NetPermission" "getProxySelector") at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472) at java.security.AccessController.checkPermission(AccessController.java:884) at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) at com.apigee.securitypolicy.InternalSecurityManager.checkPermission(InternalSecurityManager.java:84) at java.net.ProxySelector.getDefault(ProxySelector.java:94) at okhttp3.OkHttpClient$Builder.<init>(OkHttpClient.java:480) at com.lightstep.tracer.shared.HttpCollectorClient.start(HttpCollectorClient.java:97) at com.lightstep.tracer.shared.HttpCollectorClient.<init>(HttpCollectorClient.java:30) at com.lightstep.tracer.shared.HttpCollectorClientProvider.forOptions(HttpCollectorClientProvider.java:26) at com.lightstep.tracer.shared.HttpCollectorClientProvider.forOptions(HttpCollectorClientProvider.java:6) at com.lightstep.tracer.shared.AbstractTracer.<init>(AbstractTracer.java:158) at com.lightstep.tracer.jre.JRETracer.<init>(JRETracer.java:31) at

...

[fechen]

Also, based upon https://docs.apigee.com/api-platform/reference/java-permission-reference, getProxySelector in java.net.NetPermission should be allowed. But it's totally not what I experienced.

[imesh]

Fen, assuming this issue occurs on Edge Cloud, I would like to suggest you to contact Apigee Support and investigate this problem.

As you have already identified "getProxySelector" permission should be allowed on Edge Cloud according to the documentation. However, Java Security Permissions applied on your Apigee environment may depend on the Apigee release used by the Message Processors. Hence, better to contact Apigee Support and get that clarified. Thanks!