ibm mobilefirst - Worklight authentication: multiple realms -
want check approach reasonable. @ first sight seems work.
scenario have different classes of users, when validating credentials can determine class. plan have "master" realm manages authentication , subsidiary realms use control access particular adapter procedures, example "gold".
we can protect procedureordinary() realm master , procedurespecial() realm gold.
in master authenticating code (derived doublestepadapter example) can write
wl.server.setactiveuser("master", useridentity); if ( criteria met ) wl.server.setactiveuser("gold", useridentity);
we never set challenge handler gold realm, authentication realm handled via master realm.
any issues idea.
technically - work. big assumption here user never try access procedure protected "gold" realm before authenticating. overcome problem i'd recommend following approach - need define login-function , logout-function each realm. make sure of login-functions return same json piece (or use same login-function in realms). way doesn't matter realm triggered authentication - same piece of json challenge , app knows how process it.
Comments
Post a Comment