[Geoserver-devel] [jira] (GEOS-5320) Security, stateless services and SessionDebugFilter.SessionDebugWrapper

GeoServer GeoServer Developer
1

Christian Mueller created ImprovementGEOS-5320
Security, stateless services and SessionDebugFilter.SessionDebugWrapper

Issue Type:

ImprovementImprovement

Affects Versions:

2.2, 2.3-beta1

Assignee:

Andrea Aime

Components:

Security

Created:

22/Sep/12 3:27 AM

Description:

Until now, the SessionDebugWrapper creates a stack trace in the log if an HTTP session was created outside the GUI path /web/**.

Single Sign solutions may require to create a session for stateless services since the overhead for authentication for each request may not be acceptable. As an example, CAS would need two additional requests to the CAS server for each OGC request.

The debugging code should be configurable, it would be nice to add Ant patterns allowing session creation without a stack trace.

Project:

GeoServer

Priority:

MinorMinor

Reporter:

Christian Mueller
This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your [JIRA administrators](https://jira.codehaus.org/secure/ContactAdministrators!default.jspa). For more information on JIRA, see: [http://www.atlassian.com/software/jira](http://www.atlassian.com/software/jira)