<div dir="ltr">I've been researching the custom object feature, and I saw examples of it for use in the attribute resolving/creation, but that wouldn't help me here because that happens after the auth piece has been completed, yes? <div><br></div><div>I know the CookieManager is in the global-config.xml conf file:<div><br></div><div><div>   <bean id="shibboleth.PersistentCookieManager" class="net.shibboleth.utilities.java.support.net.CookieManager"</div><div>        p:httpServletRequest-ref="shibboleth.HttpServletRequest"</div><div>        p:httpServletResponse-ref="shibboleth.HttpServletResponse"</div><div>        p:secure="%{idp.cookie.secure:false}"</div><div>        p:httpOnly="%{idp.cookie.httpOnly:true}"</div><div>        p:cookieDomain="%{idp.cookie.domain:}"</div><div>        p:cookiePath="%{idp.cookie.path:}"</div><div>        p:maxAge="%{idp.cookie.maxAge:31536000}" /></div></div><div><br></div></div><div>but would I put a custom object in there? Doesn't seem like a file anyone should be messing with.</div><div><br></div><div>I don't suppose you could give me an example piece of code using the cookie manager? or if there is some API documentation I haven't found...? I saw the example of a custom activation condition (<a href="https://wiki.shibboleth.net/confluence/display/IDP30/SPNEGOAuthnConfiguration">https://wiki.shibboleth.net/confluence/display/IDP30/SPNEGOAuthnConfiguration</a>) and from that I have a very general sense of how this would be created, but it's vague at best. </div><div><br></div><div>I would really appreciate any examples anyone could provide.</div><div><br></div><div>Thanks, and happy Friday! -</div><div><br></div><div>Karla B</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 12, 2016 at 2:07 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">> Thank you, Scott. That sounds like the way to go! I figured there must be<br>
> something reading cookies built into the code, since that's an important<br>
> component, but I didn't think I could use it.<br>
<br>
</span>The java-support packages are API, so CookieManager is a stable interface until at least 4.0.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div style="margin-left:40px">Karla Borecky<br>Systems Administrator<br>ITS<br>Smith College<br>Northampton, MA 01063<br></div></div>
</div>