[Security & JAAS/JBoss] - How to capture HttpSession expire event - JAAS with JBoss
by VAkuthota
When an HTTP session expires and the client makes a request to any secured resource, the JAAS subject will not be found for authorization. At this point, the security framework creates a new HTTP session, stores the target URL value in the session, and then redirects the user to the login page. After a successful login process, the user is forwarded back to the target page.
But i want to redirect to the specific page....how can i achieve this ??
In Weblogic to achieve this weblogic.servlet.security.AuthFilter abstract class, as part of the WebLogic Server security API, provides hooks into the internal workings of the WebLogic JAAS Framework.
It has the following methods to acheive it. i.e.,
| /** Called just before Authentication and Authorization occurs in the Web Application. */
|
| public void doPreAuth(javax.servlet.ServletRequest req, javax.servlet.ServletResponse res)
|
| /** Called just after Authentication and Authorization occurs in the Web Application, if the process was a success. */
|
| public boolean doSuccessAuth(javax.servlet.ServletRequest req, javax.servlet.ServletResponse res)
|
| /** Called just after Authentication and Authorization occurs in the WebApplication, if the process was a failure. */
|
| public void doFailAuth(javax.servlet.ServletRequest req, javax.servlet.ServletResponse res)
By implementing AuthFilter we can capture this.
But i did not find a way to capture this in JBoss security API ??
How can we do this...
Appreciate your suggestion.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3985065#3985065
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3985065
19Â years, 7Â months
[Clustering/JBoss] - Re: TwoClustersSameNetwork inconsistency
by azhurakousky
Good question
First, yes it willl work with the notation you specified. I am not sure if you know, but I'll explain anyway about these types of notation, since JBoss is using them everywhere.
${jboss.partition.name:DefaultPartition} reads as
if System property wit the name jboss.partition.name exist, then use its value, otherwise default it to the name specified after ":" (which in your case is DefaultPartition)
So, you can set it as System Property (-D option) at server startup. There is also another way of doing it as well. So here is what you can do:
1. run -c <server_config> -Djboss.partition.name=MyPartition -u 230.1.2.10
2. run -c <server_config> -g MyPartition -u 230.1.2.10
Execute run -help to get more startup options. As far as the once I used in the examples:
-g Partition Name
-u Multicast IP
Regards
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3985051#3985051
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3985051
19Â years, 7Â months