actually, authentication process is launched in the AccessFilter class when no Subject is present in the HttpSession, or when the LogonProcessURI is requested.
it will be useful to provide a way to customize this mechanism, by a 'Factory' way.
I do not see much necessity to do so. The way it works it is ok. I think other things are much more necessary than this. I always say: invest into documentation.
Regards, chk
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Logged In: YES
user_id=1859282
Originator: NO
I do not see much necessity to do so. The way it works it is ok. I think other things are much more necessary than this. I always say: invest into documentation.
Regards, chk