Details
-
Improvement
-
Status: Resolved
-
Minor
-
Resolution: Fixed
-
0.5.0
-
None
Description
In the integration of sshd with our application we have a PasswordAuthenticator implementation which authenticates against our internal user database. From this we derive an internal user object which is needed for further permissions checking, etc in the file system view. However the createFileSystemView call takes a user name only. If the ServerSession was passed to createFileSystemView also, the user object could be stored in the session and retrieved when the file system view is created. In the current system I have to store the user object in a ThreadLocal and get it from there in createFileSystemView.
This would require a custom session factory and session object - if the session had some internal storage for private attributes, etc (rather like an HttpSession) this would not be necessary.
Attachments
Issue Links
- duplicates
-
SSHD-96 Virtual File System improvement for SCP and session injection
- Resolved