including the HttpServletRequest in the Credentials

[Andrew Petro]

Prabhu, Scott,

In CAS 2, both PasswordHandlers and TrustHandlers could consider the
HttpServletRequest in making their authentication determination.

How to use CAS 2 Password and Trust handlers directly in CAS 3 is documented
here:

http://www.ja-sig.org/wiki/display/CAS/Using+CAS2+PasswordHandlers+in+CAS3

The legacy credentials binder demonstrates binding the HttpServletRequest
into the credentials.

Andrew

> -----Original Message-----
> From: cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu] On
> Behalf Of Scott Battaglia
> Sent: Wednesday, July 05, 2006 6:58 AM
> To: Yale CAS mailing list
> Subject: Re: How to compile CAS source
> 
> Prabhu,
> 
> You need to extend the UsernamePasswordCredentials class i.e. (public
> class MyCredentials extends UsernamePasswordCredentials) and add a
> method to set the request object.
> 
> Then create a CredentialsBinder class which will call the setRequest
> method.  You'll then just merely need to change the configuration of the
> cas-servlet.xml so that the authenticationViaForm action uses your
> Credentials and CredentialsBinder class.
> 
> The request object will then be available for you.
> 
> -Scott