Not sure where exactly to start answering you. It is a configuration option to control is using a filter chain, establishing a list of authentication providers to try in order (basic authentication, remember me to establish a session, etc...).
Having a session is useful for the web administration application, but not required for the various stateless protocols such as WMS and WPS. Indeed for those you may wish to check credentials each time. Reading: - https://docs.geoserver.org/latest/en/user/security/auth/chain.html - https://docs.geoserver.org/latest/en/user/security/auth/web.html -- Jody Garnett On Wed, 8 Jan 2020 at 03:11, Loigge Bernd <[email protected]> wrote: > Hi all > > > > I am using the Key authentication module. As my key provider I am using an > external web service. > > When the external web services returns a valid user every subsequent > request is valid as I understand it – the webservice is not called anymore. > > > > - How does Geoserver handle this internally? Is there some kind of > session created? > - How can I invalidate / expire the token from the external service? > Is there some timeout setting after which the wesbervice is called again to > see if the token is still valid? > > > > Thanks > > Bernd > > > _______________________________________________ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: > http://geoserver.org/comm/userlist-guidelines.html > > If you want to request a feature or an improvement, also see this: > https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer > > > [email protected] > https://lists.sourceforge.net/lists/listinfo/geoserver-users >
_______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-users
