Skip to content

TOMEE-4682 TomEESecurityContext.authenticate() should delegate to Htt… - #2902

Open
jgallimore wants to merge 1 commit into
apache:mainfrom
jgallimore:passkey-2fa
Open

TOMEE-4682 TomEESecurityContext.authenticate() should delegate to Htt…#2902
jgallimore wants to merge 1 commit into
apache:mainfrom
jgallimore:passkey-2fa

Conversation

@jgallimore

Copy link
Copy Markdown
Contributor

…pServletRequest as opposed to invoking JASPIC directly. Includes 2 new examples demonstrating 2FA using passkeys.

…pServletRequest as opposed to invoking JASPIC directly. Includes 2 new examples demonstrating 2FA using passkeys.
@rzo1
rzo1 requested a review from jungm August 19, 2026 11:20
@exabrial

Copy link
Copy Markdown
Contributor

Hey Jonathan! Excellent patch! I did some local testing and found a couple of areas that are tangentially related:

  • @LoginToContinue produces sessions 100% of the time, when it should really just produce one when redirecting to login. So if accessing a non-protected resource -> don't create a session. If accessing one -> create a session to save the request

  • Speaking of the request; the saved request to be replayed isn't getting fully replayed.

I'll get these pushed to an additional PR in a few mins

@exabrial

Copy link
Copy Markdown
Contributor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants