users@glassfish.java.net

Re: what is best practice for a web application authentication in glassfish?

From: Jim Driscoll <Jim.Driscoll_at_Sun.COM>
Date: Tue, 16 May 2006 12:48:28 -0700

More than likely, everyone who can help is away at JavaOne this week -
we may be a bit slow answering... JavaOne is a GIANT effort at Sun, and
almost everyone ends up getting involved.

Jim

Legolas Woodland wrote:
> Legolas Woodland wrote:
>> Hi
>> Thank you for reading my post
>> what is best practice to create a login page , authenticate users and
>> then let them see some pages
>> the requirement is:
>> 1-after user logged in he/she should be able to look at some urls
>> based on his/her privileged
>> 2-the login information should reside in session until user explicitly
>> logout or the session time out.
>>
>> now my questions are :
>> -Does glassfish provide some kind of standard mechanism like tomcat :
>> j_security login mechanism? (container managed)
>> -is it wise to use this mechanism ,please give me some reason for your
>> answer
>>
>> -is there any sample application that show me this ?
>> I would love such a sample application because i can learn easier from
>> samples.
>>
>> ps: is it better to ask in forum or mailing list ?
>> Thank you.
>>
>>
>>
> can some one give me some light on this issue ?
>
> Thanks
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>