Java EE (Java Enterprise Edition) General Discussion

Hi all, Im trying to setup a security configuration and im having the biggest headaches.. ive implemented jaas authorization and it works flawlessly.. the problem comes with authorization.. my request.isUserInRole() and getUserPrincipal and getRemoteUser keep returning null..

i figured out its because I was not posting to j_security_check .. or is it?

well anyways im thinking if I can use a servlet filter to authenticate, save the subject in the session and then forward the username, password to j_security_check with new fields j_username and j_password..

this i believe will allow me to use struts to authenticate actions based on roles and at the same time allow me to save the subject in the session for use in code..

any ideas?

thanks

jazz