Re: [Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2019-06-06 Thread Mark Thomas
On 06/06/2019 20:06, bugzi...@apache.org wrote: > https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 > > --- Comment #14 from jerry --- I've disabled this idiot's account. I'll delete the comment from the database shortly. Mark ---

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2019-06-06 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #14 from jerry --- Technical side of the main subject. For example Tomcat F14 Fighter Jet. The specification of a Tomcat will be a good reference. The complication of the machine and material. Will come in handle for us to digest i

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2019-05-06 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #13 from Christopher Schultz --- (In reply to Mark Thomas from comment #11) > JASPIC exposes both the request and the response. The solution to this one > could just be "Use JASPIC". Sounds great. Now how does one "use JASPIC" to u

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2019-05-06 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #12 from Christopher Schultz --- (In reply to Christopher Schultz from comment #9) > Justification for Realm over Authenticator: Justification for not using Realm: 1. No access to HttpServletRequest (for e.g. IP logging) :( --

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2019-05-04 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #11 from Mark Thomas --- JASPIC exposes both the request and the response. The solution to this one could just be "Use JASPIC". -- You are receiving this mail because: You are the assignee for the bug.

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2019-05-04 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #10 from Remy Maucherat --- I agree you could experiment with a combined realm (lockout realm is an example of that indeed), it would need to call your listener in authenticate and invoke. -- You are receiving this mail because: Y

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2019-05-04 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #9 from Christopher Schultz --- (In reply to Christopher Schultz from comment #8) > Two additional thoughts: > > 1. Could this be implemented as a Realm which can wrap another realm? This > may simplify things when a user wants to

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2019-05-04 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #8 from Christopher Schultz --- Two additional thoughts: 1. Could this be implemented as a Realm which can wrap another realm? This may simplify things when a user wants to authenticate using one-of-many concrete realm implementati

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2018-08-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #7 from Michael Osipov <1983-01...@gmx.net> --- (In reply to Christopher Schultz from comment #6) > (In reply to Michael Osipov from comment #5) > > GSSName or X509Certificate and like. I always prefer passing Object and the > > impl

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2018-08-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #6 from Christopher Schultz --- (In reply to Michael Osipov from comment #5) > GSSName or X509Certificate and like. I always prefer passing Object and the > implementation decides about the cast. Seems reasonable. Tomcat only supp

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2018-08-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #5 from Michael Osipov <1983-01...@gmx.net> --- (In reply to Christopher Schultz from comment #4) > (In reply to Michael Osipov from comment #3) > > (In reply to Christopher Schultz from comment #2) > > > Created attachment 35824 [de

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2018-08-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #4 from Christopher Schultz --- (In reply to Michael Osipov from comment #3) > (In reply to Christopher Schultz from comment #2) > > Created attachment 35824 [details] > > Draft patch to give an idea of the proposal > > > > See thi

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2018-08-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #3 from Michael Osipov <1983-01...@gmx.net> --- (In reply to Christopher Schultz from comment #2) > Created attachment 35824 [details] > Draft patch to give an idea of the proposal > > See this draft patch for something that might w

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2018-03-29 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #2 from Christopher Schultz --- Created attachment 35824 --> https://bz.apache.org/bugzilla/attachment.cgi?id=35824&action=edit Draft patch to give an idea of the proposal See this draft patch for something that might work. At le

[Bug 59750] Amend "authenticate" method with context by means of HttpServletRequest

2018-03-29 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 --- Comment #1 from Christopher Schultz --- What about a listener for authentication events? -- You are receiving this mail because: You are the assignee for the bug. - To un