The remember me service is not the correct way. This service has a timeout
value which will cause problems. The remember me service is more for
convenience, I would not recommend to use it in a production environment.
One important question, is Geoserver calling your app or is your app
calling geoserver. In the second case, the solution may be easy. Your app
would act as an authentication proxy and you can send user name and roles
with http headers.
What do you mean with alongside Geoserver ?. If both applications run
within one J2EE container, you can delegate authentication/role management
to the J2EE container.
Please answer my questions, I think we will find a solution.
2012/8/24 Mark Paxton <[email protected]>
> Hi all,
>
> I'm attempting to build a web app that runs alongside Geoserver and
> provides data to be mapped though geoserver's web services. To do this
> I need to be able to re-use the login session from my other web app
> (spring security), then request the particular set of features I'm
> interested in.
>
> So far I've created new UserGroup and Role services that can access my
> own user database, but I'd really appreciate some advice on how to share
> the login with Geoserver. It looks like the easiest way might be to use
> RememberMe sessions - so any thoughts on the particular configuration to
> do this would be helpful.
>
> Thanks!
>
> Mark
>
>
>
>
>
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Geoserver-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
