[JBoss Web Development] - Multiple Wars Sharing a Login Page
by James C
James C [http://community.jboss.org/people/jamesc1] created the discussion
"Multiple Wars Sharing a Login Page"
To view the discussion, visit: http://community.jboss.org/message/633969#633969
--------------------------------------------------------------
Greetings all.
I am currently using JBoss 6.1.0.Final
I have several EARs each with their own WAR. I am using the standard single sign on valve and form based authentication.
The intent is for the user to go to a WAR's URL, be redirected to a login page, and then be sent back to their original page. I would like it if all the WAR's could share a login page.
Problem one occurs because I can not access a page outside of the war. For example given these three domains
/main
/sub1
The WAR associated with the /sub1 domain can not point to /main/login.jsp. If I attempt it then I simply go to the page /sub1/main/login.jsp.
I have a attempted a simple redirect page in /sub1 pointing to the login page in /main. The problem with that is that after authenticating the SSO Valve forwards you to the last page which was the redirect to the login page causing what would be a nasty loop but results in the error "Invalid direct reference to form login page"
Is there any way to pass along the actual original request url?
What are some solutions to this problem other than including the login fucntionality in every war?
I don't mind making custom valves or filters if necessary however, I have read about failed attempts to add a filter for j_security_check.
The only thing I have on the table right now is to extend the FormAuthenticator and add in the functionality to pass in an original url in a parameter but I would think that this is not an uncommon problem with a better solutions.
Any suggestions and/or advice welcome.
Let me know if I need to provide more information or elaborate on anything.
Thanks in advance.
--------------------------------------------------------------
Reply to this message by going to Community
[http://community.jboss.org/message/633969#633969]
Start a new discussion in JBoss Web Development at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]
12 years, 5 months
- 1
- 1
[PicketBox Development] - Callback Handlers
by Anil Saldhana
Anil Saldhana [http://community.jboss.org/people/anil.saldhana] created the discussion
"Callback Handlers"
To view the discussion, visit: http://community.jboss.org/message/634260#634260
--------------------------------------------------------------
I would like to brainstorm the requirements for callback handlers from DB and LDAP primarily.
DML had asked for this last year and I never prioritized this.
https://jira.jboss.org/jira/browse/SECURITY-467 https://jira.jboss.org/jira/browse/SECURITY-467
https://jira.jboss.org/jira/browse/SECURITY-470 https://jira.jboss.org/jira/browse/SECURITY-470
I will be providing this as part of the PicketBox beta upgrade in AS7 this week.
Currently there are two options to seed the CBH config.
1) Pass in a hashmap which is an open ended configuration.
2) Qualify the configuration with xml elements.
(12:18:19 PM) asaldhan: darranl: one more Q. if I expect a hashmap as config for the cbh,
that should work, right? sys admins can always configure a key value pair for the store in Q.
(12:20:01 PM) darranl: asaldhan, can we get a design thread started, I think there are a few
things to consider - the problem with hashmap style config is admins need to know the properties,
I think finding a user friendly XML representation would be preferable
At this time, I am going ahead and providing CBH with both the types of config.
--------------------------------------------------------------
Reply to this message by going to Community
[http://community.jboss.org/message/634260#634260]
Start a new discussion in PicketBox Development at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]
12 years, 5 months
- 1
- 1