Pat,
Jetspeed support "auto-login". Which means it will look at the cookies
and automatically login the user. This may work for you.
1) Both sites must have the same host. The cookies are set for the
host, not for the domain. See modules.actions.jlogin.
2) The user must not logout. Doing this delete the cookies. You can
remove the "logout" from top.vm.
3) User must check "Remember Me" when they login in. You can make the
field hidden in top.vm.
Paul Spencer
Pat Ryan wrote:
> Hello everyone,
>
> I have the following scenario:
>
> We currently have a website running where people login, etc. At some
> point in the site, I would like to transfer them over to another
> webserver running a jetspeed application, passing some credential
> information that I would use to validate the user.
>
> When I do this, I would like to implement a transparent login capability
> with the following requirements:
>
> 1) If the user did not come from the current website or if the
> credentials have expired redirect to the current site for login.
>
> 2) If the user did come from the current website and the credentials
> have not expired check to see if they have a jetspeed account
>
> 2.1) If they do not have a jetspeed account, automatically create an
> account for them and 'log them in' with the default user portal setup
>
> 2.2) If they do have a jetspeed account, log them in so they see their
> portal setup
>
>
> My question(s) is / are:
>
> 1) Where in Jetspeed would I check for this? I am guessing that I would
> extend DBUserManager.retrieve but does DBUserManager have access to
> request parameters? Would I be able to get the credential information
> from the HttpRequest. RunData, ?
>
> So I think, I would create MyDBUserManager and in retrieve do something
> like:
>
> User retrieve( String username ) {
> // assuming I can get to request parameters
> String credential1 = ????? how do I get it
> String credential2 = ???
>
> if( credentialsAreValid( credential1, credential 2 ) ) {
>
> if( !accountExists( username ) ) {
>
> ??? How do I create the user
>
> ??? How do I create the initial default Jetspeed
> directory structure
> else
> return super.retrieve( username )
> endif
> else
> redirect to current site for login
> ??? how would I perform the redirect at this level
> endif
>
> Thanks in advance for any help you can provide.
>
> Pat
>
>
>
> --
> To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
>
>
--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
