I do appreciate that Realm "in general" should not be concern with Request/Response. One of previous replies to my original question suggested that I should look into JAASRealm for the solution to my problem (which does require access to Request/Response). I was just commenting that I can not see how JAASRealm (or any Realm for that matter) can help me

Andrei


On Jun 7, 2007, at 4:47 PM, Caldarale, Charles R wrote:

From: Andrei Tchijov [mailto:[EMAIL PROTECTED]
Subject: Re: Is it possible to introduce new authentication
method without modifying tomcat?

Nowhere in the code I can see any indication of how to get
to HTTP Request and HTTP Response from Realm code.

Why would you want to do that?  A Realm is utilized during
authentication, which is triggered when a request attempts to access a
controlled resource.  Once authenticated, the user information is
available through the Session object. No logic in the Realm should care
about individual requests or responses.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e- mail
and its attachments from all computers.

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to