-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Stefan,

On 11/14/13, 10:01 AM, Bley, Stefan wrote:
>> Does your extended-FormAuthenticator ever call any of the 
>> getParameter* family of methods (that is, before saveRequest is 
>> called)? If so, you are triggering the parsing of the input
>> stream, which evidently is discarded if the FormAuthenticator
>> decides it needs to save the request.
> 
> If you mean getParameter* from the request, then yes. We call
> request.getParameter("SAMLRequest") in order to find out wether it
> is a SAML request. So you are stating that once a
> Request#getParameter* method has been called the request
> inputstream is consumed and might not be used again?

That'll do it. It seems the FormAuthenticator expects that the POST
data is still in the input stream and hasn't been parsed.

You could try wrapping the request and re-inserting the data back into
the input stream, or you could patch saveRequest to save (and
subsequently re-load) the parameters.

Since you have broken the FormAuthenticator, you're going to have to
fix it.

It seems reasonable to request an enhancement to support this kind of
thing, so go ahead and file a Bugzilla enhancement request. Patches
are always welcome.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=3Fr6
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to