Hello,
  Before I go and figure this out myself, I thought I'd poll the collective 
wisdom of this maillist. :-)  Anyway, I would like to perform some processing 
on the values the user enters on the login form before passing the info off 
to AuthenticationProcessingFilter.  I thought to myself, "no prob - rather 
than extend AuthenticationProcessingFilter, I'll just post the login form to 
another .jsp page and have that jsp page foward the processed results 
to /j_acegi_security_check."  Well, interestingly enough, if I use 
<jsp:foward page="/j_acegi_security_check">, it doesn't work (Tomcat will not 
match the URL to the filter - AuthenticationProcessingFilter doesn't get 
invoked at all).  However, if I use <c:redirect 
url="/j_acegi_security_check">, everything works fine, except that the user's 
browser gets involved and the user's login information is encoded in the URL 
(which is kinda bad, especially since the password has not yet been encoded).  
I would really like to use jsp:forward, as that is completely internal on the 
server and would not involve the user's browser in any way.  So, is there 
some way I can configure things so that jsp:forward will work, or am I better 
off extending AuthenticationProcessingFilter and putting my custom code 
there?  Actually, for that matter, I wonder if I could directly call the 
authentication code from my other .jsp page... hmm... I guess what I'm really 
asking is, out of the options, which is the most elegant when considered with 
the overall architecture of Acegi security?  Maybe the architecture provides 
a better way to preprocess what the user enters that I'm not aware of?

Thanks in advance,
  Andy


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Acegisecurity-developer mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer

Reply via email to