Re: Using Filters

2009-06-11 Thread eags
Anyone have any idea about this or know where I can look/read to find out more? I'm totally at a loss here. It looks like there are a bunch of interesting methods for the ServletRequest class but HttpServletRequest doesn't have much I can do with it. On Jun 10, 3:31 pm, eags eagsala

Re: LoginSecurityFAQ and sessionID/tokens

2009-06-10 Thread eags
, eags eagsala...@gmail.com wrote: I am implementing user logins and authentication using the model presented in the login security FAQ.  In particular I plan on manually maintaining a table of {sessionID,User,timeout} values for each active session and not using the normal servlet session

Re: LoginSecurityFAQ and sessionID/tokens

2009-06-10 Thread eags
LoginSecurityFAQ is here BTW (http://code.google.com/p/google-web- toolkit-incubator/wiki/LoginSecurityFAQ) On Jun 10, 12:28 pm, eags eagsala...@gmail.com wrote: I found one discussion with the author of the LoginSecurityFAQ where they ask this exact question and he does state that using

Using Filters

2009-06-10 Thread eags
I'd like to use Filter to implement all my security checks as a gateway to each gwt rpc call. I'm going to include a sessionID from the client as an argument to each RPC call. I'd like my filter in doFilter to be able to pull off that argument and check if the user is logged in and see what

Very basic LoginSecurityFAQ and GWT-RPC questions

2009-06-09 Thread eags
So I read the LoginSecurityFAQ (http://code.google.com/p/google-web- toolkit-incubator/wiki/LoginSecurityFAQ) and I plan on implementing logins exactly as in the FAQ. At a high level I believe I get it but need help on the specifics so please be as detailed and specific as possible in your

HELLO MODERATOR

2009-06-09 Thread eags
Hi. I posted a comment last night starting a new thread called Very basic LoginSecurityFAQ and GWT-RPC questions. I guess because of the moderation it wasn't actually posted until about a half an hour ago but the timestamp on it still is for last night which means that it is buried in last

Re: Very basic LoginSecurityFAQ and GWT-RPC questions

2009-06-09 Thread eags
to the User object since that is likely to get referenced pretty regularly. Any issues with that scheme? (again assuming that storing the sessionID manually is what I'm supposed to do at all). On Jun 8, 11:27 pm, eags eagsala...@gmail.com wrote: So I read the LoginSecurityFAQ (http://code.google.com