java - Spring Security and Custom External Authentication -


i have such task - integrate web application external single sign-on service. it's custom non-standard implementation of sso based on setting specific cookie , redirecting application. sso , app on same domain.

currently i'm using spring security filter check cookie on specific url. works fine scenario :

web app -> sso[ supplied callback url] -> redirect app.

but fails when user visits app provides auth service , "jumps" url of app (and cookie not checked because "special" url not triggered).

what recommended approach solve such problem spring security?

thanks!

the simplest way solve problem implement own preauthenticatedprocessingfilter: http://static.springsource.org/spring-security/site/docs/3.1.x/reference/springsecurity-single.html#d0e6167

the question if authentication provider provides user name in cookie. if provides – can use filter: http://static.springsource.org/spring-security/site/docs/3.1.x/reference/springsecurity-single.html#d0e6295

please tell me if need additional clarifications.

best regards,

michael


Comments

Popular posts from this blog

ruby - Trying to change last to "x"s to 23 -

jquery - Clone last and append item to closest class -

c - Unrecognised emulation mode: elf_i386 on MinGW32 -