I have been reading about Lift Authentication and the Authentication mechanism in OSGi and have a couple of questions and possibly feature requests. Is it possible to inspect a request to perform authentication before sending the 401 if a user is not authenticated?
We use an authentication server that when a user logs in sets a cookie for our domain. I would like to be able to write a module that would inspect the users request to find this cookie and if found perform a call to the authentication server to determine if the user is still authenticated. If the user is authenticated I would like to be able to get the user's roles from the authentication and bypass the authentication request and grant access. If the user is not authenticated then they would be prompted for their username and password and the authentication would be handled by the authentication server. Basically, what this provides is a mechanism where you can integrate the authentication into single sign on systems (Glassfish allows you to do something similar with JSR-196). Thanks, -- Chad --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Lift" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/liftweb?hl=en -~----------~----~----~----~------~----~------~--~---
