[jira] [Commented] (SHIRO-714) Use a login page outside of the current webapps web context

["Brian Demers (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SHIRO-714?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16876425#comment-16876425 ] 

Brian Demers commented on SHIRO-714:
------------------------------------

Hey [~sb@dod.no]!

 

Sounds more like an OAuth2 Auth Code Flow?  Or are you trying to redirect to another webapp that will set a cookie for your domain?

> Use a login page outside of the current webapps web context
> -----------------------------------------------------------
>
>                 Key: SHIRO-714
>                 URL: https://issues.apache.org/jira/browse/SHIRO-714
>             Project: Shiro
>          Issue Type: Improvement
>            Reporter: Steinar Bang
>            Priority: Major
>
> I have written https://github.com/steinarb/authservice#forms-based-nginx-login-and-pluggable-shiro-auth-in-karaf which is a "poor man's single sign-on" for multiple webapps running inside the same apache karaf OSGi container.
> This works but each webapp needs to implement their own login page.
> I can specify a login page outside of the webapps web context like e.g. this in shiro.ini:
> {noformat}
> [main]
> shiro.loginUrl = ../authservice/login
> {noformat}
> When not authenticated, the user will be redirected to /authservice/login on the same server, but when authenticated the user will be redirected to the /authservice/ path.
> It would be nice to be able to specify a way to redirect to a URL outside the webapp so that I could use a single login page across all web applications.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)