Re: org.apache.shiro.session.StoppedSessionException

Tried securityManager.sessionManager.globalSessionTimeout=-1 but still facing issues with Session, this time it says it's unknow session. -- View this message in context: http://camel.465427.n5.nabble.com/org-apache-shiro-session-StoppedSessionException-tp5739016p5739018.html Sent from the Cam

org.apache.shiro.session.StoppedSessionException

I have Java remoting built on top of ActiveMQ and Camel using camel bean invocation. There's a route from direct component to jms on client side which injects the shiro security token (nothing special there) And on the other side I have a route from jms to bean which has policy(shiroSecurityPolicy)

Re: How can Shiro be used with camel to limit access to a route?

Does it makes sense to have alwaysReauthenticate set from shiro.ini [main] block? I believe seeing the ShiroSecurityPolicy.java code that it won't pick that setting from ini file for now. -- View this message in context: http://camel.465427.n5.nabble.com/How-can-Shiro-be-used-with-camel-to-limi

Re: How can Shiro be used with camel to limit access to a route?

Thank you for the reply. Is there a way to make the type converter work for camel header? Currently, I have a camel processor to reset the base64 shiro token to ByteSource, on the side where authentication has to be done -- View this message in context: http://camel.465427.n5.nabble.com/How-can

Re: How can Shiro be used with camel to limit access to a route?

I doubt if type converter works for camel header. Has this camel shiro issue been resolved? It shouldn't actually be ByteSource object?? Let me know I am kind of struck with this. -- View this message in context: http://camel.465427.n5.nabble.com/How-can-Shiro-be-used-with-camel-to-limit-access

camel shiro security policy with alwaysReauthenticate set to false doesn't detect seperate user logging-in

Here's the code which I had to re-work to make it work for me.apache-camel-2.10.4ShiroSecurityPolicy.authenticateUser *It was:* private void authenticateUser(Subject currentUser, ShiroSecurityToken securityToken) { if (!currentUser.isAuthenticated()) { ...