Re: How does the user principal get set on the servlet container session?

2024-02-01 Thread Mark Thomas
On 01/02/2024 17:48, Ryanesch@yahoo wrote: On Feb 1, 2024, at 10:34 AM, Mark Thomas wrote: On 31/01/2024 00:15, Ryan Esch wrote: From what I understand, the container knows if a user is authenticated by using the session id passed to it and then looking up the user principal. If

Re: How does the user principal get set on the servlet container session?

2024-02-01 Thread Ryanesch@yahoo
> > On Feb 1, 2024, at 10:34 AM, Mark Thomas wrote: > > On 31/01/2024 00:15, Ryan Esch wrote: >> From what I understand, the container knows if a user is authenticated by >> using the session id passed to it and then looking up the user principal. If >> this is non-null, the user is

Re: How does the user principal get set on the servlet container session?

2024-02-01 Thread Mark Thomas
On 31/01/2024 00:15, Ryan Esch wrote: From what I understand, the container knows if a user is authenticated by using the session id passed to it and then looking up the user principal. If this is non-null, the user is authenticated. I am using web.xml with security constraints and

Re: How does the user principal get set on the servlet container session?

2024-01-30 Thread Terence M. Bandoian
What should happen if session.getAttribute("javax.security.auth.subject") returns a non-null value? -Terence Bandoian On 1/30/2024 5:15 PM, Ryan Esch wrote: >From what I understand, the container knows if a user is authenticated by using the session id passed to it and then looking up the

How does the user principal get set on the servlet container session?

2024-01-30 Thread Ryan Esch
>From what I understand, the container knows if a user is authenticated by >using the session id passed to it and then looking up the user principal. If >this is non-null, the user is authenticated. I am using web.xml with security >constraints and UsersRoleLoginModule defined in jaas.conf