Thank you for response. Unfortunately, I'm not a skilled java developer, so this answer will not be enough to guide me. What I was able to understand (if not mistaken) is that support for SSO is partially implemented. For instance, this code in the ExplorerApp.java:
<java>
public void onRequestStart(HttpServletRequest request, HttpServletResponse response) {
// Set current application object as thread-local to make it easy accessible
current.set(this);
// Authentication: check if user is found, otherwise send to login page
LoggedInUser user = (LoggedInUser) getUser();
if (user == null) {
// First, try automatic login
user = loginHandler.authenticate(request, response);
if(user == null) {
if (mainWindow != null && !mainWindow.isShowingLoginPage()) {
viewManager.showLoginPage();
}
} else {
setUser(user);
}
}
if(user != null) {
Authentication.setAuthenticatedUserId(user.getId());
if (mainWindow != null && mainWindow.isShowingLoginPage()) {
viewManager.showDefaultPage();
}
}
// Callback to the login handler
loginHandler.onRequestStart(request, response);
}
</java>
This ends in the DefaultLoginHandler.java and looks like dead end:
<java>
public LoggedInUser authenticate(HttpServletRequest request, HttpServletResponse response) {
// No automatic authentication is used by default, always through credentials.
return null;
}
</java>
Is this the right place to extend code and what would be advice?
Regards,
Boris
