https://bz.apache.org/bugzilla/show_bug.cgi?id=62496

--- Comment #7 from Michael Osipov <1983-01...@gmx.net> ---
(In reply to Christopher Schultz from comment #4)
> Well, there doesn't seem to be a need to implement this as a Valve (unless
> I'm missing something important), so let's implement it as a Filter.

That is true, but opted for Valve because I can phyically register it *after*
my authenticator (in context.xml) guaranteeing that auth has actually happened.
I had it at Host level and it did not work of course.

Why do we need that actually separately? Why not add it to AuthenticatorBase?
That seems to be perfect.

> It would be nice to be able to set the header field-names, and enable
> either/or X-Remote-User and X-Remote-AuthType.

Agreed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to