2 Replies Latest reply on Jul 9, 2006 3:48 PM by James Plessinger

    Retrive the authenticated subject within a protected URL

    James Plessinger Newbie

      I need access to the users subject from a servlet. When I access a unprotected URL I can retrive it just fine

      example:
      SecurityAssociation.getSubject()

      and

      PolicyContext.getContext("javax.security.auth.Subject.container");

      But if I go to a protected URL, (the url-pattern under security-constraints in the web.xml) both of these methods return null.

      I have attempted to use the JaasSecurityManagerService through JMX but it seams to take three arguments, realm, principle, and an Object. I have not found any documentation whast this thrid argument is.