Ronald Wildenberg wrote:
> 
> That would be a possibility. I could then obtain all request info in my
> login method.
> 
> A small note on passing the request and response objects to the
> authentication implementation, however. This makes the authentication
> process completely dependent on the presence of a web interface. If
> login must later on occur by other means, this would be impossible
> without mocked request/response objects.

No, it needs not be the only line of defense of your authentication
implementation. This 'method' is passed to the authentication method 'login'
as the 'application' parameter. You can implement as many of such methods as
you like. 'delegate' is special for cloud-tag, because that triggers the
addition of request and response objects to the credentials.

> I'll think some more about using this method, but I think I will need to
> subclass CloudTag and extend CloudTag#makeCloud with another login
> method.

I don't think so. 

Michiel



-- 
Michiel Meeuwissen                  mihxil'
Mediacentrum 140 H'sum                [] ()
+31 (0)35 6772979         nl_NL eo_XX en_US




Reply via email to