-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Stefan,

On 11/14/13, 9:27 AM, Bley, Stefan wrote:
>> When you say "request input buffer", which buffer do you mean? I 
>> haven't looked at the code in a while, but the FormAuthenticator
>> may parse POST multipart/form-data into individual parameters,
>> thus draining the input stream in the process. Perhaps you are
>> looking for your "missing" data in the wrong place?
> 
> I can see the data in request.coyoteRequest.parameters and
> request.coyoteRequest.inputBuffer.buf.
> 
> But FormAuthenticator#saveRequest() doesn't retrieve any data from
> those fields but instead tries to preserve the request body from
> the request inputstream. Are you suggesting the inputstream might
> not be available anymore because it had already been read to
> extract the post params into individual parameters in an earlier
> stage?

Does your extended-FormAuthenticator ever call any of the
getParameter* family of methods (that is, before saveRequest is
called)? If so, you are triggering the parsing of the input stream,
which evidently is discarded if the FormAuthenticator decides it needs
to save the request.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=wQtD
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to