[JBoss JIRA] Commented: (JBAS-2352) Enhance FORM based authentication to allow for transparent auth, error messages
by David Fuelling (JIRA)
[ https://jira.jboss.org/jira/browse/JBAS-2352?page=com.atlassian.jira.plug... ]
David Fuelling commented on JBAS-2352:
--------------------------------------
I'd like this functionality as well -- is there no other way to add a "remember me" cookie when using form-based auth? (I'm using JBAS 4.2.3GA).
> Enhance FORM based authentication to allow for transparent auth, error messages
> -------------------------------------------------------------------------------
>
> Key: JBAS-2352
> URL: https://jira.jboss.org/jira/browse/JBAS-2352
> Project: JBoss Application Server
> Issue Type: Feature Request
> Security Level: Public(Everyone can see)
> Components: Web (Tomcat) service
> Affects Versions: JBossAS-4.0.3 Final
> Environment: All
> Reporter: Chris Lee
> Attachments: auth.zip
>
>
> Presently FORM based authentication does not allow developers to provide common functionality such as 'remember me' cookies, transparent authentication (from request attributes), and login failure error messages (somewhat addressed by ExtendedFormAuthenticator)
> These can be accomplished by extending the existing functionality (FormAuthenticator); unfortunately, the FormAuthenticator that ships w/ JBoss 4.0.3 does not have the necessary hooks for this.
> The attached code (auth.zip) demonstrates how we accomplished this; the primary change is in BaseCustomFormAuthenticator, with the addition of:
> 1) getUserCredentials method that looks for user credentials in the request (remember me cookie, IP address, query string, etc.)
> 2) getCredentialsFromFormFields that pulls credentials from j_username and j_password - can be extended to pull other attributes as well
> 3) Addition of onFailedAuthentication hook to allow for inserting authentication exceptions into request scope
> 4) Addition of inlineAuthentication flag (set if credentials are found in request) to prevent restoring original request (in the case of inline auth, this is the original request)
> The default implementation matches existing behaviour; see ChoicesFormAuthenticator for an example of how behaviour can be extended.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 10 months