Hi Jeff,

The question on the user list is appropriate.  However, the existing
openid support in the 1.3.0-SNAPSHOT builds is probably about 80%
complete and untested.  I haven't tested any callback capability so
there is a very real possibility that an invocation path does not
exist.

That being said, if you'd like to help test and/or iterate/implement
this, please do open up a dev list discussion, as we'll want to hash
out any issues there.

Thanks,

Les

On Sun, Jan 22, 2012 at 2:02 PM, jeffp <[email protected]> wrote:
> Not sure if this question belongs here or in the dev threads for
> shiro-*-1.3.0_SNAPSHOT.
>
> I've gotten everything compiled and working for regular login/auth, but a
> bit unclear about how to integrate the filter.  I have an existing Spring
> filterFactory declared that sets up the security manager, loginUrl and
> filterChain.
> <bean id="shiroFilter"
> class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
>            <property name="securityManager" ref="securityManager"/>
>            <property name="loginUrl" value="/login.jsp"/>
>                <property name="filterChainDefinitions">
>                    <value>
>                        /login.jsp = authc
> ...
>
> I also defined the Open4jFilter as defined in this development
> https://issues.apache.org/jira/browse/SHIRO-21?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel
> thread .
>        <bean id="authenticatingFilter"
> class="org.apache.shiro.openid4j.authc.Open4jFilter">
>                <property name="redirectToUrl" value="/openid.jsp"/>
>                <property name="openIdResponseUrl" value="/sm/openid"/>
>                <property name="failureKeyAttribute"
> value="simpleShiroApplicationLoginFailure"/>
>                <property name="loginUrl" value="/openlogin.jsp"/>
>        </bean>
>
> The Open4jFilter is getting created by Spring, but doesn't seem to be
> getting invoked.  I'm not sure what I'm missing.  From notes in
> Open4JFilter.java: openIdResponseUrl - url where this application expects
> openid providers answer. The url must be protected by this filter.  Does
> this imply that I need to write a handler of some sort to acknowledge openid
> requests?
>
> --
> View this message in context: 
> http://shiro-user.582556.n2.nabble.com/Anybody-have-OpenId-login-working-with-Shiro-1-3-0-tp7214307p7214307.html
> Sent from the Shiro User mailing list archive at Nabble.com.

Reply via email to