I am using Shiro 1.2.3 with Jersey 2.x. I am using Forms authentication with
DefaultWebSessionManager, since I need to handle both, REST and HTML.
Occasionally I need to handle POSTed form data
(application/x-www-form-urlencoded) submitted by anonymous users. These forms
can have a lot of fields, so I would like to get the form data as a
MultivaluedMap. However when I try it, I get the warning:
A servlet request to the URI http://... contains form parameters in the request
body but the request body has been consumed by the servlet or a servlet filter
accessing the request parameters.
This error goes away if there is a session cookie, so I assume the
DefaultWebSessionManager is consuming the POST params. Is this correct, and if
so is there a session manager I can use that doesn't do that, or workaround
other than using @FormParam?