extra field in form-based authentication

2007-12-13 Thread dirk ooms
Hello, I would like to have an extra field in my form-based login page, but I'm wondering how I can retrieve the value of that extra field within my application (request.getParameter(blabla) does not work). I searched the web and a suggestion was to override authenticate() in

Re: extra field in form-based authentication

2007-12-13 Thread Tim Funk
In form based authentication - you have no access to the processor other than your suggestion of overriding authenticate() in FormAuthenticator. Depending on the purpose of the field you could always perform a kludge of setting the 3rd value in a cookie and have a filter check for hte cookie

Re: extra field in form-based authentication

2007-12-13 Thread Tim Funk
in that case ... wouldn't the User-Agent header do the trick? -Tim dirk ooms wrote: interesting suggestion, but in my case the extra field is not related to the username. i would like to have a field where the user indicates on what type of device he/she works, so we can offer the appropriate

Re: extra field in form-based authentication

2007-12-13 Thread dirk ooms
interesting suggestion, but in my case the extra field is not related to the username. i would like to have a field where the user indicates on what type of device he/she works, so we can offer the appropriate stylesheet. On Thursday 13 December 2007 13:00, David Delbecq wrote: Or have the

Re: extra field in form-based authentication

2007-12-13 Thread dirk ooms
On Thursday 13 December 2007 13:54, Tim Funk wrote: in that case ... wouldn't the User-Agent header do the trick? AFAIK not, the screenwidth is the main thing i want to adapt to and i can have Firefox/Linux running on a webtablet with 800px screen, but also on a desktop with 1900px. -Tim

Re: extra field in form-based authentication

2007-12-13 Thread David Delbecq
Providing a separate form to choose layout would be far easier to do and maintain. Login form should contains only login informations (cf J2EE specs). If you want to play with customization of login form that go beyong what is allowed by j2EE security model, just forget container managed

RE: extra field in form-based authentication

2007-12-13 Thread Propes, Barry L
[mailto:[EMAIL PROTECTED] Sent: Thursday, December 13, 2007 5:00 AM To: users@tomcat.apache.org Subject: extra field in form-based authentication Hello, I would like to have an extra field in my form-based login page, but I'm wondering how I can retrieve the value of that extra field within my

RE: extra field in form-based authentication

2007-12-13 Thread Propes, Barry L
: Thursday, December 13, 2007 6:49 AM To: users@tomcat.apache.org Cc: David Delbecq Subject: Re: extra field in form-based authentication interesting suggestion, but in my case the extra field is not related to the username. i would like to have a field where the user indicates on what type

Re: extra field in form-based authentication

2007-12-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David, David Delbecq wrote: Login form should contains only login informations (cf J2EE specs). I agree that login forms should only contain login information, but I question the J2EE spec's interpretation of what should be considered login