Aur�lien DEHAY schrieb:

Hello,

> > In your authentication handler add a check for the Cookie and
> > return a specific userid.
>
> How do I do that? When a resource is protected and the user is not
> authenticated, I redirect him to a "login" page (with the redirect-to
> element in the handler element), but the authentication is made with
> the authentication element. I don't really see where to put the check
> of the cookie.

Your authentication ressource checks the login. If cookie is set log the 
user in.
Then you can easily access protected documents.

In your case use your redirect-to to redirect him to a auth-by-cookie 
pipeline, authenticate the user there and redirect to the requested 
ressource (internally) else if cookie is not set redirect to login 
form.

HTH
Christoph

Attachment: pgpRDRjyXJ8Kw.pgp
Description: PGP signature

Reply via email to