Announcement Announcement Module
No announcement yet.
custom authentication with url parameters Page Title Module
Move Remove Collapse
This topic is closed
Conversation Detail Module
  • Filter
  • Time
  • Show
Clear All
new posts

  • custom authentication with url parameters

    I am trying to perform an authentication via url parameters. The system should check, whether certain parameters (not neccessarily just a username password combination) are set and then authenticate against an external service.
    Where can I perform such authentication? Do I have to overwrite AbstractAuthenticationProcessingFilter? I think this is some kind of PreAuthentication, but I am not sure how to implement my specific case.
    Help appreciated!!!

  • #2
    Yes, you can look at the existing implementations for preauthentication style auth, and use those to write your own. You'll need a custom filter, and (possibly) AuthenticationProvider.

    I should add though, that in general, doing pre-auth using GET URL params is a really unsafe method of authentication, unless this is within a tightly controlled SSO environment.