How can I add more than one security domain for a project ?

vvn07 Dec 7, 2015 1:14 PM

In my project I need to do the basic form authentication and on top of that some other verification's are required and the result will be authenticated only if all the verification's are completed successfully?
How can i achieve this using undertow ?

1. Re: How can I add more than one security domain for a project ?

dlofthouse Dec 7, 2015 1:17 PM (in response to vvn07)

You need to take a step back, it may not be an additional security domain you need.

What kind of verification do you need and how does this differ from the things validated using form authentication?
Actions
2. Re: How can I add more than one security domain for a project ?

vvn07 Dec 7, 2015 1:24 PM (in response to dlofthouse)

I have a main application which tracks the sessions created when a user logs in to the web application. So one verifications is like whether the user have crossed the maximum concurrent session exceeds, another one like whether the user has applied the license to the application like that..
Actions
3. Re: How can I add more than one security domain for a project ?

dlofthouse Dec 7, 2015 1:30 PM (in response to vvn07)

If this is handled within security domains you could probably add additional login modules to your configuration, the problem here however would be you would then need to disable all caching on that security domain otherwise the user could open an unlimited number of sessions and rely on the successful auth being cached.

Alternatively the concurrency side may be better tracked with either a HTTP Servlet Filter or possibly an Undertow HttpHandler.
Actions
4. Re: How can I add more than one security domain for a project ?

vvn07 Dec 7, 2015 1:34 PM (in response to dlofthouse)

I tried HttpHandler, but I am not able to get the session in handle request method.
Actions

Go to original post