Access principal name from servlet filter

Cantor, Scott cantor.2 at osu.edu
Wed Aug 26 10:05:50 EDT 2015


On 8/26/15, 7:26 AM, "dev on behalf of Etienne Dysli-Metref" <dev-bounces at shibboleth.net on behalf of etienne.dysli-metref at switch.ch> wrote:

>3. Modified conf/intercept/profile-intercept.xml to add a flow descriptor:
>    <bean id="shibboleth.AvailableInterceptFlows"
>parent="shibboleth.DefaultInterceptFlows" lazy-init="true">
>      <property name="sourceList">
>        <list merge="true">
>          [...]
>+         <bean id="intercept/vho-cookie"
>+               parent="vho.UsernameCookieFlow" />
>        </list>
>      </property>
>    </bean>
>+   <bean id="vho.UsernameCookieFlow" parent="shibboleth.InterceptFlow"
>+         abstract="true" p:nonBrowserSupported="false" />
>
>So far it works and I get the cookie. Is the way I set it up correct?
>(especially 3. above)

Well, I'm sure it's ok, but I'm not sure of the value of having the bean declared abstract and then a second one added to inherit from it.

>I used bean definition inheritance to copy it with my own settings, but
>I got the Spring errors below unless I explicitly added the secure and
>httpOnly properties.

I would guess you're missing boilerplate declarations that install a lot of the Spring stuff we use in your flow beans file perhaps.

-- Scott



More information about the dev mailing list