Hello everyone,

I have the following scenario:

We currently have a website running where people login, etc.  At some
point in the site, I would like to transfer them over to another
webserver running a jetspeed application, passing some credential
information that I would use to validate the user.

When I do this, I would like to implement a transparent login capability
with the following requirements:

1) If the user did not come from the current website or if the
credentials have expired redirect to the current site for login.

2) If the user did come from the current website and the credentials
have not expired check to see if they have a jetspeed account

2.1) If they do not have a jetspeed account, automatically create an
account for them and 'log them in' with the default user portal setup

2.2) If they do have a jetspeed account, log them in so they see their
portal setup


My question(s) is / are:

1) Where in Jetspeed would I check for this?  I am guessing that I would
extend DBUserManager.retrieve but does DBUserManager have access to
request parameters?  Would I be able to get the credential information
from the HttpRequest. RunData, ?

So I think, I would create MyDBUserManager and in retrieve do something
like:

    User retrieve( String username ) {
        // assuming I can get to request parameters
        String credential1 = ????? how do I get it
        String credential2 = ???

        if( credentialsAreValid( credential1, credential 2 ) ) {

            if( !accountExists( username ) ) {

                ??? How do I create the user

                ??? How do I create the initial default Jetspeed
directory structure
            else
                return super.retrieve( username )
            endif
    else
        redirect to current site for login
        ??? how would I perform the redirect at this level
    endif

Thanks in advance for any help you can provide.

Pat



--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to