Programmatically logging in or artificial form authentication

Question

A nice one for Friday afternoon here :)
Is there a way to programmatically log a principal into the servlet
container in weblogic. The Form based authentication and siblings don't work
in my particular case because the user is keyed on 2 values, instead of
simply a 'username'. ie - username and account number.
So I'm using my userbean to look up the principal associated with the user
and I would like to programmatically assicate the principal with the session
(or whatever they are associated with normally).
One other idea is to submit an artificially created form based login
request... ie submit the information normally associated with a form
authorization POST to the server. Any ideas on how to go about doing that?
Thanks in advance.

Answer 1

I guess I need to know if "j_security_check" can be used as a request dispatcherYes you can, I've done it on WL6.0 SP1.
"zeppelin71" <[email protected]> wrote:
Stumbled upon the following method as well:
weblogic.servlet.security.ServletAuthentication.weak(java.lang.String
username, java.lang.String password, javax.servlet.http.HttpSession session)
looks interesting.
"mblumrich" <[email protected]> wrote in message
news:[email protected]..
How does this sound? After finding the principal name associated withthe
user who is trying to log on, I do the following:
req.setAttribute("j_username",principalName);
// forward the new form data to the container
getServletConfig().getServletContext().getRequestDispatcher("j_security_chec
k").forward(req,res);
I'm a few days away from being able to check if this will work... Iguess
I
need to know if "j_security_check" can be used as a request dispatcher....
"mblumrich" <[email protected]> wrote in message
news:3b057c8a$[email protected]..
A nice one for Friday afternoon here :)
Is there a way to programmatically log a principal into the servlet
container in weblogic. The Form based authentication and siblings
don't
work
in my particular case because the user is keyed on 2 values, instead
of
simply a 'username'. ie - username and account number.
So I'm using my userbean to look up the principal associated withthe
user
and I would like to programmatically assicate the principal withthe
session
(or whatever they are associated with normally).
One other idea is to submit an artificially created form based login
request... ie submit the information normally associated with a form
authorization POST to the server. Any ideas on how to go about doing
that?
Thanks in advance.