0 Replies Latest reply on Jan 3, 2013 10:08 AM by Julio Faerman

    SSO across different auth-methods

    Julio Faerman Novice



      I am using AS7 and my application is divided in two .war modules, a web GUI (gwt) and a REST API (jax-rs).

      The GUI auth-method is FORM and the API auth-method is BASIC


      It would be very nice if they could share the user authentication, but it seems that SSO is limited to cookies:


      "Requires Cookies.  SSO is maintained via a cookie and URL rewriting is not supported."

      From: https://community.jboss.org/wiki/JBossWebSingleSignOn


      I tried setting the cookie path to / and send it to both apps, but it is ignored by the REST api, as expected.


      Any ideas to work around that?