users@jaspic-spec.java.net

[Bug 4675] New: No portable way for auth module to ask the container to create a container authentication session

From: <bugzilla-daemon_at_java.net>
Date: Wed, 13 Feb 2013 02:36:14 +0000

http://java.net/bugzilla/show_bug.cgi?id=4675

             Bug #: 4675
           Summary: No portable way for auth module to ask the container
                    to create a container authentication session
    Classification: Unclassified
           Product: jaspic-spec
           Version: 1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: source
        AssignedTo: monzillo_at_java.net
        ReportedBy: monzillo_at_java.net
                CC: issues_at_jaspic-spec.java.net


The spi is optimized for the case where the auth module is responsible for
creating and managing authentication sessions internally and separate from
Servlet's HttpSession machinery.

Still there are repeated requests for this enhancement. The RI provides this
functionality via an undocumented messageInfo flag; which when set by an auth
module, instructs the Glassfish container to "register" and authentication
session.

The enhancement request is to standardize a portable means for an auth module
to cause the encompassing container to create an authentication and to bind it
to the response. This might be done by a flag, or by a new Callback handler, or
perhaps by another mechanism.

-- 
Configure bugmail: http://java.net/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.