Feature Requests item #694618, was opened at 2003-02-27 20:59
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376688&aid=694618&group_id=22866

Category: JBossSX
Group: v3.2
Status: Open
Resolution: None
Priority: 5
Submitted By: Ken Yee (kenyee)
Assigned to: Nobody/Anonymous (nobody)
Summary: Feed HttpServletRequest to Custom Login Modules

Initial Comment:
I'm sure you've seen how some sites allow you to logon and on that same logon page, 
you'll see a 
checkbox that lets them remember the login by sending a browser cookie down.

Currently, there is no way to do this in JBoss if you're using container managed 
security and 
JAAS/JBossSX.  I've searched through the jboss users mailing list and the security 
forum on jboss.org 
and people have asked for it in different ways (digest authentication, logging into 
container security from 
a servlet, etc.).

Can you guys please see if you can squeak this into JBoss 3.2 (and 4.0)?  I know it's 
at RC status but it's 
an important thing to be able to do.  I basically need to be able to get 
HttpServletRequest in the initialize 
method of a custom login module so I can look for an automatic login cookie that my 
login servlet gives 
the browser.  Best place to put HttpServletRequest is probably in the sharedState map 
of 
AbstractLoginModule.initialize() so it's available to all login modules.

If you don't use container managed security, there are lots of workaround you can use, 
but they're not as 
secure.

Thanks for listening.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376688&aid=694618&group_id=22866


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to