Auto-login user programatically?

[Cantor, Scott]

On 7/25/13 12:03 PM, "Byte Flinger" <byteflinger at gmail.com> wrote:

>I have tried to create a very simple LoginHandler which would simply log
>the user in if he just goes to the right page, regardless of given input
>(for test purposes) but it seems the authentication engine still requires
>an existing cookie
>
>I keep getting "LoginContext key cookie was not present in request" from
>HttpServletHelper.

That isn't the session cookie, it's a precondition of using the IdP at
all. You cannot take the user into the middle of the flow. You must start
at a profile endpoint, and that will send the user through the AuthnEngine
and into whatever login handler is configured. There is no way to change
that requirement.

>I am probably missing something though I am not sure what. I have browsed
>through several login handler implementations and Shibboleth's own source
>code but I keep ending up on the fact that it requires that the user has
>a cookie setup on his browser.

It does, a login context cookie set by a profile handler. That isn't the
session cookie and has nothing to do with "bypassing" authentication.

-- Scott