DaoAuthenticationProvider currently authenticates using username and password. Can I authenticate using say agentId, username, password without implementing AuthenticationManager?
DaoAuthenticationProvider currently authenticates using username and password. Can I authenticate using say agentId, username, password without implementing AuthenticationManager?
Last edited by robyn; May 14th, 2006 at 05:10 PM.
Thanks Ben!
The approaches solve the problem.
Has the Acegi team considered changing the AuthenticationDao interface to
loadByUsername(Object principal) instead of loadByUsername(String username)? Or loadByUserName(String username, Object principal).
Unfortunately, that would be a really problematic change to make. Most people implement AuthenticationDao, so adding a new method to that interface would break their existing implementations. Also, all through DaoAuthenticationProvider we're using Strings, so it would be a non-trivial change. Many people subclass DaoAuthenticationProvider as well (for reasons such as this thread mentions) and as such it would cause backward compatibility constraints.