I think I do not understand your questions - if Shiro has been already initialized on the server for the web application, then, why do it a second time? What do you mean with 'work with / access the ini file"? What do you mean by "access the FormAuthenticationFilter"? You do not need to access it, but instead specify it in the [url] section of the ini file. Then any user that sends a valid HTTP POST with valid HTML structure, username and password will automatically be authenticated by Shiro and you can check this by calling 'SecurityUtils.getSubject().isAuthenticated()' in your server side Java code.
-- View this message in context: http://shiro-user.582556.n2.nabble.com/How-should-we-go-about-configuring-a-Desktop-Client-with-Shiro-in-the-Server-tp7581322p7581345.html Sent from the Shiro User mailing list archive at Nabble.com.
