-
1. Re: can extend modeshape with shiro?
rhauch Jun 23, 2014 10:03 AM (in response to a175335)You can implement your own custom authentication and/or authorization providers.
-
2. Re: can extend modeshape with shiro?
a175335 Jun 23, 2014 12:33 PM (in response to rhauch)HI :
I have done a demo which implement my own custom Authentication.the class named 'MyAuthenticationProvider'implements the interface AuthenticationProvider and the class of 'MySecurityContext' implements both SecurityContext and AuthorizationProvider.But I don't understand how to use the shiro's Authentication and Authorization in modeshape.I want to store my users,roles and resources in modeshape as its nodes and porperties.I am not sure that I should extend modeshape provider with shiro, or I should use my custom Authentication to control modeshape and use shiro to control my apllication.
-
3. Re: can extend modeshape with shiro?
rhauch Jun 23, 2014 12:57 PM (in response to a175335)To determine whether ModeShape should create a session given a set of credentials using content in the repository will require some bootstrapping, since your AuthenticationProvider implementation will have to be able to access the content and thus be authenticated. I'm not exactly sure how best to do this. It may require an enhancement in 4.0.
Authorization is much easier, since you can implement the AdvancedAuthorizationProvider interface, and this already provides a way for your provider to access the session content.