transparent login / jetspeed portlet config - how to do this

[Pat Ryan <pr...@cardean.edu>]

Hello everyone,

I have the following scenario:

We currently have a website running where people login, etc.  At some
point in the site, I would like to transfer them over to another
webserver running a jetspeed application, passing some credential
information that I would use to validate the user.

When I do this, I would like to implement a transparent login capability
with the following requirements:

1) If the user did not come from the current website or if the
credentials have expired redirect to the current site for login.

2) If the user did come from the current website and the credentials
have not expired check to see if they have a jetspeed account

2.1) If they do not have a jetspeed account, automatically create an
account for them and 'log them in' with the default user portal setup

2.2) If they do have a jetspeed account, log them in so they see their
portal setup


My question(s) is / are:

1) Where in Jetspeed would I check for this?  I am guessing that I would
extend DBUserManager.retrieve but does DBUserManager have access to
request parameters?  Would I be able to get the credential information
from the HttpRequest. RunData, ?

So I think, I would create MyDBUserManager and in retrieve do something
like:

    User retrieve( String username ) {
        // assuming I can get to request parameters
        String credential1 = ????? how do I get it
        String credential2 = ???

        if( credentialsAreValid( credential1, credential 2 ) ) {

            if( !accountExists( username ) ) {

                ??? How do I create the user

                ??? How do I create the initial default Jetspeed
directory structure
            else
                return super.retrieve( username )
            endif
    else
        redirect to current site for login
        ??? how would I perform the redirect at this level
    endif

Thanks in advance for any help you can provide.

Pat



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

Re: transparent login / jetspeed portlet config - how to do this

[Paul Spencer <pa...@apache.org>]

Pat,
Jetspeed support "auto-login".  Which means it will look at the cookies 
and automatically login the user.  This may work for you.

1) Both sites must have the same host.  The cookies are set for the 
host, not for the domain.  See modules.actions.jlogin.

2) The user must not logout.  Doing this delete the cookies.  You can 
remove the "logout" from top.vm.

3) User must check "Remember Me" when they login in.  You can make the 
field hidden in top.vm.

Paul Spencer



Pat Ryan wrote:

> Hello everyone,
> 
> I have the following scenario:
> 
> We currently have a website running where people login, etc.  At some
> point in the site, I would like to transfer them over to another
> webserver running a jetspeed application, passing some credential
> information that I would use to validate the user.
> 
> When I do this, I would like to implement a transparent login capability
> with the following requirements:
> 
> 1) If the user did not come from the current website or if the
> credentials have expired redirect to the current site for login.
> 
> 2) If the user did come from the current website and the credentials
> have not expired check to see if they have a jetspeed account
> 
> 2.1) If they do not have a jetspeed account, automatically create an
> account for them and 'log them in' with the default user portal setup
> 
> 2.2) If they do have a jetspeed account, log them in so they see their
> portal setup
> 
> 
> My question(s) is / are:
> 
> 1) Where in Jetspeed would I check for this?  I am guessing that I would
> extend DBUserManager.retrieve but does DBUserManager have access to
> request parameters?  Would I be able to get the credential information
> from the HttpRequest. RunData, ?
> 
> So I think, I would create MyDBUserManager and in retrieve do something
> like:
> 
>     User retrieve( String username ) {
>         // assuming I can get to request parameters
>         String credential1 = ????? how do I get it
>         String credential2 = ???
> 
>         if( credentialsAreValid( credential1, credential 2 ) ) {
> 
>             if( !accountExists( username ) ) {
> 
>                 ??? How do I create the user
> 
>                 ??? How do I create the initial default Jetspeed
> directory structure
>             else
>                 return super.retrieve( username )
>             endif
>     else
>         redirect to current site for login
>         ??? how would I perform the redirect at this level
>     endif
> 
> Thanks in advance for any help you can provide.
> 
> Pat
> 
> 
> 
> --
> To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
> For additional commands, e-mail: <ma...@jakarta.apache.org>
> 
> 



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>