[jetty-users] Authenticated Session in Jetty

[Alex Gout <agout@xxxxxxxxxxxxxxxxxxxxx>]

Hi!

I'm using jetty 7.4.5 in Camel, and have a securityhandler and
sessionsupport configured:

jetty:#[url]?handlers=securityHandler&sessionSupport=true

my securityHandler configuration uses a JAAS login service and
BasicAuthenticator:

    <bean id="securityHandler"
class="org.eclipse.jetty.security.ConstraintSecurityHandler">
        <property name="authenticator">
            <bean
class="org.eclipse.jetty.security.authentication.BasicAuthenticator" />
        </property>
        <property name="constraintMappings">
            <list>
                <ref bean="constraintMapping" />
            </list>
        </property>
        <property name="loginService" ref="jaasLoginService" />
    </bean>

The configuration works fine, except that the loginService gets invoked
each request. What I would like is that the session is cached and does
not re-authenticate untill it expires. I this something I can achieve by
configuration (if so, how?) or do I have to implement a custom
Authenticator that takes care of this myself?

Thanks!

regards,
Alex