JOSSO login

[sakshi.13agg]

Hello,

My web application uses JOSSO authentication by redirecting user to the josso login page whenever he tries to access any web server component.
I am using following code in web.xml-

<login-config>
<auth-method>FORM</auth-method>

<form-login-config>
<form-login-page>/login-redirect.jsp</form-login-page>
<form-error-page>/login-redirect.jsp</form-error-page>
</form-login-config>
</login-config>

However for a particular usecase I am sending a session ID of already logged in user to get logged in to same session and do not want to show this JOSSO login page to the user.
Can anybody help me in bypassing JOSSO?

Thanks in Advanced!!

[Dhivakaran]

Hi ,

Just gone through your question .
Found some information on it .
I hope you are using JOSSO with Apache web server

Define public resource
If you want to define public resource (directory) just add
Require sso-session-or-anonymous
to directory element. This will bypass josso security check for that resource.
This is used if you want automatic login for public resource
or you want to access user information from public resource


Check the below link for more information
Setup JOSSO Agent - Apache 2.2 - Atricore

Thanks

[sakshi.13agg]

Actually the problem that I face is that I want to run a filter before this JOSSO security constraint.
Is there a way to bypass it?