How Do I Return Additional Data During j_security_check Authentication

Question

I am supporting an application that uses the j_security_check authentication. This works well.
We have a request to allow for resetting the users password should they forget the one they were using. The concept is as follows:
1) Users attempts to login and fails.
2) User calls help desk with their user name.
3) Helpdesk looks up the user and verifies their identity over the phone.
4) Helpdesk provides a user specific password authentication code good for one hour (code is based on several data elements available in the database)
5) User enters their username and the authentication code to access the application.
6) The application senses the use of the authentication code and redirects the user to a mandatory password change page.
end concept
I can generate the code and have the user authenticate using it. I am looking to return some value to through the j_security_check authentication process that will be used by the home page. This token will be read and the page automatically will redirect the user. I am not familiar with the workings of the j_security_check process and believe i can set something in the response object or return some node that can be read by the home page. I do see where a session cookie is being used in the post login processing but I cannot find where it is set.
Any examples, hint, and where I can find applicable help would be great.
Thanks.
Edited by: pdreaiii on Apr 21, 2009 12:11 PM

Answer 1

Someone has posted this in jGuru and written a library.
http://www.jguru.com/forums/view.jsp?EID=1171559
http://sourceforge.net/projects/jguard