Thanks Mark! Will take a look
On Fri, Oct 8, 2021, 5:01 AM Mark Thomas wrote:
> On 07/10/2021 18:37, Michael Kolenda wrote:
> > Hey Tomcat Users,
> >
> > I've run into an interesting behavior with a custom JASPIC provider. When
> > there is an existing session i.e. JSESSIONID cookie, It appears
On 07/10/2021 18:37, Michael Kolenda wrote:
Hey Tomcat Users,
I've run into an interesting behavior with a custom JASPIC provider. When
there is an existing session i.e. JSESSIONID cookie, It appears the
groups/roles are not checked again... even when the new groups are provided
in the client
Hey Tomcat Users,
I've run into an interesting behavior with a custom JASPIC provider. When
there is an existing session i.e. JSESSIONID cookie, It appears the
groups/roles are not checked again... even when the new groups are provided
in the client Subject (JASPIC's validate() ). When attempting
