Proper use of Custom Authenticator and Basic User Principal

Hi

We are using form based login and the jdbcAuthenticator and have got our
environment set up and working OK.

As part of the application I have created a UserGlobalBean class to hold
small nuggets of data relating to the user for use throughout the session.

Currently this bean is instantiated and initialised the first time the
user logs in an arrives at their "home page" via a jsp:usebean on this
home page.

I am interested in people's views as to whether the approach I have used
is sensible or whether I should consider implementing a custom
authenticator. The motivation to write a custom authenticator is to
take care of creating and initialising this UserGlobalBean as part of
the authentication process.

This also leads on to my other question which is whether I should extend
the BasicPrincipal to incorporate the stuff I am putting in the
UserGlobalBean, or whether the the BasicPrincipal should be left well alone?

TIA for any insights.

Alan Wright
Received on Sun 14 Apr 2002 05:05:05 -0700