> Does your extended-FormAuthenticator ever call any of the > getParameter* family of methods (that is, before saveRequest is > called)? If so, you are triggering the parsing of the input stream, > which evidently is discarded if the FormAuthenticator decides it needs > to save the request.
If you mean getParameter* from the request, then yes. We call request.getParameter("SAMLRequest") in order to find out wether it is a SAML request. So you are stating that once a Request#getParameter* method has been called the request inputstream is consumed and might not be used again? Stefan --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org