-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Chema,
On 7/18/2011 9:16 AM, Chema wrote: > Now I'm trying to use filters. When realm code validates an user , > redirect to protected resource. If I can filter this redirection and > load user data into session, I think that could works This is how we do things using a custom Realm. We allow Tomcat to go about it's business setting the Principal in the request, and then we use a Filter to detect that the Principal is set but no "user" object is in the session. At that point, we perform the "real" login and do whatever is necessary on top of the actual authentication. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk4kSlwACgkQ9CaO5/Lv0PADegCeL2PnZlp0tUy19OFqcoPIGSzE wokAoIg440qywv9coCciX1gmuCLKYHlp =1Qac -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org