Multi-stage login

[krisjenkins]

Hi,

I'm wondering if acegi does/could support multiple-stage logins. That is, I'd like to put it in a webapp container and present the user with:

#1 - Request username and password.
#2 - Request secure key code for the day (for example)
#3 - Display requested secure page.

I've set up acegi for another project that had a single-stage login, and I'm very happy with it, so I'd quite to put it in this new project if I can. Any ideas?

Oh, and is there a preferred buzzword for multiple-stage login? I can't find anything about this google and I suspect it's because I don't have the popular term...

Cheers,
Kris

[Ben Alex]

You'd be best off developing a custom AuthenticationProcessingFilter that prompted for all three properties (username, password, token code) and then present that to a custom DaoAuthenticationProvider. The latter contains an isPasswordCorrect and createSuccessAuthentication method to assist with such customisation.