[jetty-users] JDBCLoginService without a config file

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

[jetty-users] JDBCLoginService without a config file

Li Xu
Hi,

I'm trying to get JDBC-backed login going with my embedded Jetty. I can't find a way to programmatically set jdbc url, driver, table names, etc properties without creating a physical file. As I read the source for org.eclipse.jetty.security.JDBCLoginService, it apparently only takes a string (as the properties filename or url) as input and the doStart() method opens an InputStream to read the props. Does anyone know if there's way to avoid a file by just calling Java methods to set JDBC settings?

Thanks,
Li

_______________________________________________
jetty-users mailing list
[hidden email]
https://dev.eclipse.org/mailman/listinfo/jetty-users
Reply | Threaded
Open this post in threaded view
|

Re: [jetty-users] JDBCLoginService without a config file

Will Hoover

I found it to be easier to provide your own MappedLoginService that makes the JDBC calls for Jetty. That way you're not constrained by the default table/column names that Jetty expects. Also, you only have to define your data source for the database connection in one central location in your application versus adding a separate one for Jetty. Not to mention that you could allow another service to load users that's not database specific (like JPA). All you need to do is add your login service to a org.eclipse.jetty.security.ConstraintSecurityHandler#setLoginService method.

 

import org.eclipse.jetty.security.MappedLoginService;

import org.eclipse.jetty.server.UserIdentity;

import org.eclipse.jetty.util.security.Credential;

 

public class MyLoginService extends MappedLoginService {

                public MyLoginService() {

                                setName("My Realm Name");

                }

                @Override

                protected UserIdentity loadUser(final String username) {

                                // make service call that will look up a user by username

                                final User user = makeServiceCalltoJdbcHere.getUser(username);

                                final Credential cred = Credential.getCredential(user.getPassword());

                                return putUser(user.getUsername(), cred, user.getRoles());

                }

                @Override

                protected void loadUsers() throws IOException {

                                // make service call to load users that will be cached by Jetty (alternatively you can call

                                // _users.clear() here if you want to use another user caching mechanism like JPA- it will cause loadUser to be called)

                                _users.putAll(loadMyUserMap());

                }

                @Override

                public UserIdentity login(final String username, final Object credentials) {

                                // do something here if you need to validate a user when they login

                                return super.login(username, credentials);

                }

                @Override

                public void logout(final UserIdentity identity) {

                                // do something here if you need to invalidate a user when they logout

                                super.logout(identity);

                }

}

 

From: [hidden email] [mailto:[hidden email]] On Behalf Of Li Xu
Sent: Tuesday, May 29, 2012 10:13 PM
To: [hidden email]
Subject: [jetty-users] JDBCLoginService without a config file

 

Hi,

 

I'm trying to get JDBC-backed login going with my embedded Jetty. I can't find a way to programmatically set jdbc url, driver, table names, etc properties without creating a physical file. As I read the source for org.eclipse.jetty.security.JDBCLoginService, it apparently only takes a string (as the properties filename or url) as input and the doStart() method opens an InputStream to read the props. Does anyone know if there's way to avoid a file by just calling Java methods to set JDBC settings?

 

Thanks,

Li


_______________________________________________
jetty-users mailing list
[hidden email]
https://dev.eclipse.org/mailman/listinfo/jetty-users