Hi,
I pushed the initial rewrite of the authentication in GateIn that is based on WCI and Servlet 3.0 authentication.
The good news is it improves things by simplifying the code and remove all the previous http redirects that we needed.
I wrote a doc about it there : https://community.jboss.org/wiki/GateIn35Authentication
- Marek and Matt should look at the authentication with SSO and WS-Security
- Trong should look at the login form redirection for groups and users as now we don't rely anymore on servlet container security constraint (like it is already for portal pages)
Note that this integrates with the new Alpha common/wci/pc stack, Bolek and I have been working for a couple of weeks. I guess it could also affect WSRP if it is using WCI in some way (WCI has had many simplifications last week with the removal of unnecessary stuff).
cheers
Julien
_______________________________________________
gatein-dev mailing list
gatein-dev@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/gatein-dev