Proposal: void AuthenticatorBase.doLogin(request, response, principal)

These 3 new (proposed) methods allow webapps (with classloader access to the server APIs) to implicitly register a Principal with a HttpSession (e.g to implement or use-existing 3rd party Authenticator/Realm systems): Add to org.apache.catalina.connector.ResponseFacade: public Response getRespo

Realm.authenticate() doesn't register Principal in Session.. use Authenticator instead?

Hi all, I am able to access the current context's org.apache.catalina.Realm object using Yoav Shapira's Tomcat-Realm example; however, when I call Realm.authenticate(String user, String pass), the Principal object that it returns is not being registered with the session (subsequent requests have