Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@geronimo.apache.org
Received-SPF: pass (athena.apache.org: domain of marco.laponder@kewill.com
 designates 194.178.120.122 as permitted sender)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: retrieve custom principal from custom loginmodule in servlet
Date: Fri, 5 Sep 2008 14:54:39 +0200
Message-ID: <7C173BF6D5C92C4C9259C35519CBD49B034A4DA3@daf.interchain.nl>
Thread-Topic: retrieve custom principal from custom loginmodule in servlet
Thread-Index: AckN57hoNjUthWyaRy6Ahadxo+VCTABbdBhQ
From: "Marco Laponder" <marco.laponder@kewill.com>
To: <user@geronimo.apache.org>


Didn't quite succeed in this method. The getUserPrincipal always return
met a Principal of type org.apache.geronimo.jetty6.JAASJettyPrincipal.
Solution which I now use is getting the subject of that object and
looping over the principals in that subject to find my custom principal.
It works but I am not really impressed with the code ;-)

Kind regards,
Marco

-----Oorspronkelijk bericht-----
Van: David Jencks [mailto:david_jencks@yahoo.com]=20
Verzonden: woensdag 3 september 2008 19:07
Aan: user@geronimo.apache.org
Onderwerp: Re: retrieve custom principal from custom loginmodule in
servlet


On Sep 3, 2008, at 1:28 AM, Marco Laponder wrote:

> Hi Everyone,
>
> I am trying to build a custom login module where custom principals are
> added to the subject. The login works as expected and on the commit I
> add my specific principal object to the subject.
>
> So far so good, but now I need to retrieve this object In my servlet =20
> and
> I was expecting to be able to retrieve it by
> httpRequest.getUserPrincipal() but the principal returned is not an
> instance of my custom principal. Can anyone given any tips how to find
> out what I am doing incorrect or is this situation not possible at =20
> all ?

You don't say if your login configuration includes any other login =20
modules.  Assuming that it does not....

The specs don't describe how to pick the "UserPrincipal" from the =20
possibly numerous principals in a logged-in Subject.  Geronimo uses =20
this code snippet:

         Set<? extends Principal> principals =3D =20
subject.getPrincipals(GeronimoCallerPrincipal.class);
         if (!principals.isEmpty()) {
             context.principal =3D principals.iterator().next();
         } else if (!(principals =3D =20
subject.getPrincipals(PrimaryRealmPrincipal.class)).isEmpty()) {
             context.principal =3D principals.iterator().next();
         } else if (!(principals =3D =20
subject.getPrincipals(RealmPrincipal.class)).isEmpty()) {
             context.principal =3D principals.iterator().next();
         } else if (!(principals =3D subject.getPrincipals()).isEmpty()) =
{
             context.principal =3D principals.iterator().next();
         }

So, the most reliable way to get your special principal returned as =20
the UserPrincipal is to have it implement the marker interface =20
GeronimoCallerPrincipal, and assure it is the only principal that =20
implements that interface.

Hope this helps
david jencks

>
>
>
> Kind regards,
> Marco Laponder
>