struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Darren Hill <dh...@724.com>
Subject RE: Has anyone integrated SecurityFilter within a Struts app?
Date Wed, 18 Sep 2002 18:46:35 GMT
OK.

Maybe I'm missing something ... but how do I gain access to the
authenticated user?

For instance ... once the user has logged in ... I wanted to present them
with a page containing their first name ... lame example.

D.

-----Original Message-----
From: John Menke [mailto:john@eagleinfosystems.com]
Sent: September 18, 2002 2:45 PM
To: Struts Users Mailing List
Subject: RE: Has anyone integrated SecurityFilter within a Struts app?


did you have JDBCRealm working without security-fitler? if so look at the
template I posted for the securityfilter-config.xml file.  Once you get the
structure right it should work.

SF is a pseudo contained managed security.  Not sure how JAAS works with it.


> -----Original Message-----
> From: Darren Hill [mailto:dhill@724.com]
> Sent: Wednesday, September 18, 2002 2:35 PM
> To: 'Struts Users Mailing List'
> Subject: RE: Has anyone integrated SecurityFilter within a Struts app?
>
>
> Here's what I want to do ...
>
> Use a JAAS soultion to authenticate/authorize the user.
> I the same breath ... as the user successfully 'logs'-in, I what
> to retrieve
> that users entire info from the DB, create an UserView and place
> it into the
> Session.
>
> I've succesfully done 3/4 of this in JBoss ... but am unable to
> retrieve the
> users crendtials.
>
> My thought was to check for the UserView in session ( by extending the
> RequestProcessor ), and if it didn't exist, retrieve the
> crendtials, find my
> user, create the view and store .. otherwise, continue processing.
>
> After looking into 'filters', I saw that it my be better to go that way.
> However, I'm not farmiliar with them and have a bit of a time
> constraint on
> my hands.  If I could configure the securityFilter to achieve
> this .. I'd be
> golden.  ( I like the fact that its app server independent as
> well, I hated
> coupling myself to JBoss ).
>
> Any thoughts would be greatly appreciated.
>
> D.
>
> -----Original Message-----
> From: Dan Payne [mailto:dpayne@sotx.org]
> Sent: September 18, 2002 2:22 PM
> To: Struts Users Mailing List
> Subject: RE: Has anyone integrated SecurityFilter within a Struts app?
>
>
> Darren, I've successfully implemented the SecurityFilter with
> Tomcat 4.1.10,
> MySQL and JDBC Realm.  Anything I can help you with?
>
> -Dan
>
> -----Original Message-----
> From: Darren Hill [mailto:dhill@724.com]
> Sent: Wednesday, September 18, 2002 7:43 AM
> To: 'Struts Users Mailing List'
> Subject: Has anyone integrated SecurityFilter within a Struts app?
>
>
> I'm looking for an example webapp.
>
> I've wasted too much time already doing it myself.
>
> I've got an app that uses JAAS with JBoss, but its too tightly
> coupled.  And
> JBoss doesn't have the best documentation.
>
> I also need to retrieve and store a UserView upon successful
> authentication,
> so that I may grab it from session .. yada yada yada.
>
> D.
>
> --
> To unsubscribe, e-mail:
> <mailto:struts-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
> <mailto:struts-user-help@jakarta.apache.org>
>
>
>
> --
> To unsubscribe, e-mail:
> <mailto:struts-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
> <mailto:struts-user-help@jakarta.apache.org>
>
> --
> To unsubscribe, e-mail:
<mailto:struts-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail:
<mailto:struts-user-help@jakarta.apache.org>


--
To unsubscribe, e-mail:
<mailto:struts-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail:
<mailto:struts-user-help@jakarta.apache.org>

--
To unsubscribe, e-mail:   <mailto:struts-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:struts-user-help@jakarta.apache.org>


Mime
View raw message