You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Warren Crossing <Wa...@nocode.com.au> on 2001/05/04 07:09:14 UTC

AutoLogon J_Security_Check

hey all, 

i'm about to build a servlet class component that proactively &
automatically ( without being prompted ) logs the user into servlet security
and bypasses a browser request for j_security_check..

i plan to achieve this by using;
a static html page with a form on it
a known dummy protected page to trigger the j_security_check response.. 
a servlet class to receive the request
spoof the browser request to request dummy page,
log the user in trick =) repsond with j_user_name & j_password.
and getRequestDispatcher().forward to the target page..

i know its a little more tricky than this & so i'll ask if anyone is
interesed in the outcome.. or attempted this before with tomcat. i've done a
similar thing with weblogic servlet security.  and this functionality is
desireable to when merging my web portal into a web page interface.. but i
know its bad for guaranteed security.

regards,

warren.