This would work great except that you cannot 'force' a container to bring up
the login page (portably).
UserManager doesn't help you because it too is an Orion specific API (just
like RoleManager)
About the only way to do portable user
management/authentication/authorisation is with an open source project
called OSUser (part of OpenSymphony which I participate in). See
http://www.opensymphony.com/osuser for details. I currently have an
application porting well (single EAR) between JBoss and Orion, and
Weblogic/Pramati/JRun support are almost done. It also supports Resin (if
you just want WARs).
Check it out anyway,
Cheers,
Mike
On 5/3/02 1:49 PM, [EMAIL PROTECTED]
([EMAIL PROTECTED]) penned the words:
If you want to use form-based authentication, the only 'legal' way that I
can think of is to write a sessionfilter that checks when a principal
exists for the first time during a session.
Otherwise you'd have to do your own authentication, calling
RoleManager.login() and if it succeeds write a record to the database with
the current date. (Of course this could be within a filter, too)
This would be much easier if either login() or authenticate() would be
handled by the UserManager (which is user configurable), but alas that is
not so ...
A real hack would be to have two forms on the login page, the first one
being submitted on buttonpress to itself, where it handles the creation of
the login record, and then when resent automatically submitting the
loginform (which must have been filled out previously) to j_security_check
by script ... drawbacks: the user may notice the screen reloading, and I
noticed most people here try to avoid html client side programming like the
pestilence:)
cheers
--peter
-Original Message-
From: Alex Paransky [mailto:[EMAIL PROTECTED]]
Sent: Sunday, March 03, 2002 9:30 AM
To: Orion-Interest
Subject: How can I perform an action when web user is first logged on?
I would like to keep lastLogonDate for my users. However, with the J2EE
security model it does not appear that I can inject any processing between
the time when user is authenticated and a forward to the target url occurs.
Did anyone solve this problem. If so, could you share your solution?
-AP_
http://www.alexparansky.com
Java/J2EE Architect/Consultant
