Home/ Questions/Q 7592535
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-30T20:55:52+00:00

I have a two factor based authentication server which i need to integrate to

  • 0

I have a two factor based authentication server which i need to integrate to a existing web application

Existing application description:-

java JSP, servlet application

running on tomcat server 6.0

source code is not available

My twofactor solution provide following integrations:-

  1. web service which receive username and OTP returns “true ” or “false”
  2. Has a OTP page which can be called from any website sending username,targetPage as parameter (credit card transaction type)

Problem statement

I need to integrate my two-factor(OTP verification ) to the existing application ,so that OTP is asked on every login and user has no way he can enter the application without OTP .
I have heard about creating filters on the web server(of exiting application ) but It will allow intruder to use his OTP and the victim’s password

  • I cannot make changes to the existing application
  • I have complete control on my two-factor application . ( i can modify and create more API’s)
Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You could create a Tomcat valve which intercepts all requests and prompts for the OTP. This way if the user does not enter a valid OTP the request won’t even make it to the webapp

    • 0