Re: [OT] Specifying a Custom Authenticator Class

2021-10-07 Thread Christopher Schultz
Jerry, On 10/6/21 15:09, Jerry Malcolm wrote: Chris, thanks so much.  But please bear with me.  I'm in the slow group I think I have a pretty good handle on creating the authenticator.  But take me from the top, using manager as an example. In the web.xml file it has login auth-method set

Re: [OT] Specifying a Custom Authenticator Class

2021-10-06 Thread Jerry Malcolm
Chris, thanks so much.  But please bear with me.  I'm in the slow group I think I have a pretty good handle on creating the authenticator.  But take me from the top, using manager as an example.  In the web.xml file it has login auth-method set to BASIC.  I'm assuming that invokes

Re: [OT] Specifying a Custom Authenticator Class

2021-10-05 Thread Christopher Schultz
Jerry, On 10/5/21 12:23, Jerry Malcolm wrote: hi Chris, thanks for the feedback. I'm not using JWTs.  I'm just sending a base64 token made up of "a:b:c:d:e".   I don't mind cloning the BasicAuthenticator if that's what's required.  I'm still not understanding how TC will handle my modified

Re: [OT] Specifying a Custom Authenticator Class

2021-10-05 Thread Jerry Malcolm
hi Chris, thanks for the feedback. I'm not using JWTs.  I'm just sending a base64 token made up of "a:b:c:d:e".   I don't mind cloning the BasicAuthenticator if that's what's required.  I'm still not understanding how TC will handle my modified header.  I assume that if TC finds an

Re: [OT] Specifying a Custom Authenticator Class

2021-10-05 Thread Christopher Schultz
Jerry, On 10/4/21 22:40, Jerry Malcolm wrote: I really don't care whether it's called Basic, Malcolm, RollYourOwn, or whatever.  I was just emulating techniques I've had to implement as a client for credit card gateways and other services in the past that all use BASIC prefix with their own

Re: Specifying a Custom Authenticator Class

2021-10-05 Thread Christopher Schultz
Mark, On 10/5/21 04:46, Mark Thomas wrote: On 05/10/2021 03:40, Jerry Malcolm wrote: An earlier post suggested I just implement a CredentialHandler, which would be great.  But it looked like the credential handler is given "id/pw" extracted from the base64.  Or will it actually return

Re: Specifying a Custom Authenticator Class

2021-10-05 Thread Mark Thomas
On 05/10/2021 03:40, Jerry Malcolm wrote: An earlier post suggested I just implement a CredentialHandler, which would be great.  But it looked like the credential handler is given "id/pw" extracted from the base64.  Or will it actually return whatever it finds in the base64 token? 

Re: Specifying a Custom Authenticator Class

2021-10-04 Thread Jerry Malcolm
I really don't care whether it's called Basic, Malcolm, RollYourOwn, or whatever.  I was just emulating techniques I've had to implement as a client for credit card gateways and other services in the past that all use BASIC prefix with their own token definition.  I can easily rename the

Re: Specifying a Custom Authenticator Class

2021-10-04 Thread Christopher Schultz
Michael, On 10/3/21 11:58, Michael Osipov wrote: Am 2021-10-02 um 02:48 schrieb Jerry Malcolm: I need to write a custom BasicAuthenticator class to decode a specialized encoding of the authToken.  I have been scouring google for info.  I found one post where the answer included the statement:

Re: Specifying a Custom Authenticator Class

2021-10-03 Thread Michael Osipov
Am 2021-10-02 um 02:48 schrieb Jerry Malcolm: I need to write a custom BasicAuthenticator class to decode a specialized encoding of the authToken.  I have been scouring google for info.  I found one post where the answer included the statement: This would clearly violate Basic auth scheme and

Re: Specifying a Custom Authenticator Class

2021-10-03 Thread Christopher Schultz
Jerry, On 10/1/21 20:48, Jerry Malcolm wrote: I need to write a custom BasicAuthenticator class to decode a specialized encoding of the authToken.  I have been scouring google for info.  I found one post where the answer included the statement: "Extending from AuthenticatorBase is a great

Re: Specifying a Custom Authenticator Class

2021-10-02 Thread Mark Thomas
On 02/10/2021 01:48, Jerry Malcolm wrote: I need to write a custom BasicAuthenticator class to decode a specialized encoding of the authToken.  I have been scouring google for info.  I found one post where the answer included the statement: "Extending from AuthenticatorBase is a great idea,

Specifying a Custom Authenticator Class

2021-10-01 Thread Jerry Malcolm
I need to write a custom BasicAuthenticator class to decode a specialized encoding of the authToken.  I have been scouring google for info.  I found one post where the answer included the statement: "Extending from AuthenticatorBase is a great idea, and you can avoid Tomcat's standard