*** !!!! THIS BUG TRACKER IS FOR GERRIT CODE REVIEW !!!! *** Do not submit bugs for chrome/android and issues with your company's *** Gerrit setup here. Those issues belong in different issue trackers.

What steps will reproduce the problem?

1. Start Gerrit with any plugin loaded that uses the HTTP injector
2. Trigger the reload of the plugin using the reload plugin REST-API

What is the expected output?

The plugin is reloaded and no errors are thrown in the error_log.

What do you see instead?

The plugin is reloaded, however the error log contains the following error:

1) [Guice/ErrorInCustomProvider]: OutOfScopeException: Cannot access scoped [WebSession]. Either we are not currently inside an HTTP Servlet request, or you may have forgotten to apply GuiceFilter as a servlet filter for this request.
  at DynamicItem.bind(DynamicItem.java:111)
  while locating WebSession

Learn more:
  https://github.com/google/guice/wiki/ERROR_IN_CUSTOM_PROVIDER

1 error

======================
Full classname legend:
======================
DynamicItem:         "com.google.gerrit.extensions.registration.DynamicItem"
GuiceFilter:         "com.google.inject.servlet.GuiceFilter"
OutOfScopeException: "com.google.inject.OutOfScopeException"
WebSession:          "com.google.gerrit.httpd.WebSession"

Please provide any additional information below.

This seems to be caused by the invocation of the REST-API outside a proper scope with a WebSession, due to the HTTP audit record requesting the session-id.

See the relevant code below in RestApiServlet.java

        globals.auditService.dispatch(
            new ExtendedHttpAuditEvent(
                globals.webSession.get().getSessionId(),
                globals.currentUser.get(),
                req,
                auditStartTs,
                qp != null ? qp.params() : ImmutableListMultimap.of(),
                inputRequestBody,
                statusCode,
                response,
                rsrc,
                viewData == null ? null : viewData.view));
      }