Removing an authenticated session

2006-02-23 Thread Johan Haleby
Hi! I have a filter that passes the username and password entered in the basic http authentication pop up dialog to a login.jsp which redirects to a servlet that does the actuall authentication. Since my authentication takes place somewhere else, I would like the basic http authentication pop up w

Re: Redirect username and password from http basic authentication to a serlvet as parameters

2006-02-23 Thread Johan Haleby
rname ) ; > wrapRequest.setPassword( password ) ; > chain( (HttpServletRequest)wrapRequest, response ) ; > > All things being equal, I'd go for the first option since it's the > simplest. Use the second if you are using third-party code that expects > to be able to use g

Re: Redirect username and password from http basic authentication to a serlvet as parameters

2006-02-22 Thread Johan Haleby
header > String authInfo=Base64.decode( request.getHeader("Authentication" > ).substring(6).getBytes() ) ; > String user=authInfo.substring(0, authInfo.indexOf(':')-1) ; > String password = authInfo.substring(authInfo.indexOf(':')+1) ; > > //Check the pas

Redirect username and password from http basic authentication to a serlvet as parameters

2006-02-22 Thread Johan Haleby
Hi! I've implemented a simple custom realm that I use in Tomcat 5.0.28. But instead of doing the authentication in the authenticate method in my realm I'd like the actual authentication to be conducted by a another servlet that takes username and password as parameters. So basically what I'd like