More than the username and password

Question

Hi,
How would you handle a situation where the user should give his/her username and
more than one identity proof? For example:
username:
zone id :
pin no :
The Servlet spec contains the FORM based authentication with "j_username" and
"j_password". How to add the extra information?
Thanks for your time,
Regards,
Yagiz Erkan (http://www.erkans.com)
([email protected])
([email protected])

Answer 1

Hi Yagiz,
The specification could certainly be altered to have some j_custom tags to more easily
address the problem you describe.
Perhaps you should go to sun's newsgroups or see if you can contact them directly to give
them feedback on the specification?
Cheers
Joe Jerry
Yagiz Erkan wrote:
we are using the following setup:
- FORM-based login where <form-login-page> points to a servlet
- the servlet concatenates the two password items (in your case zone-id
and
pin-no) and
passes it as "password" to
weblogic.servlet.security.ServletAuthentication.weak(username, password)
to perform the authentication
- our CustomRealm separates the two password items and performs the
authenticationHi Alfred,
Thanks for the prompt response. I was thinking about the same technique ;-). Although
I haven't considered all the options, it seems to me that the spec could have
an extension point here with some custom fields like "j_custom" or any field starting
with "j_"... Any comments?
Thanks again,
Kind Regards,
Yagiz Erkan (http://www.erkans.com)
([email protected])
([email protected])