https://bz.apache.org/bugzilla/show_bug.cgi?id=62496
--- Comment #7 from Michael Osipov <1983-01...@gmx.net> --- (In reply to Christopher Schultz from comment #4) > Well, there doesn't seem to be a need to implement this as a Valve (unless > I'm missing something important), so let's implement it as a Filter. That is true, but opted for Valve because I can phyically register it *after* my authenticator (in context.xml) guaranteeing that auth has actually happened. I had it at Host level and it did not work of course. Why do we need that actually separately? Why not add it to AuthenticatorBase? That seems to be perfect. > It would be nice to be able to set the header field-names, and enable > either/or X-Remote-User and X-Remote-AuthType. Agreed. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org