Question

I’m using form authentication on tomcat with orbeon. I can display user credentials on a specific page (I adapted the java-authentication sample). I also implemented a logout link on all pages using a custom theme (it’s a simple href to /authentication/logout).

I wonder if there is a simple way to display something like “You are logged as USERNAME (ROLE)” on the page banner using my custom theme ?

Answer 1

You would do this in the theme, which is in XSLT:

1. Adding a link to the logout page should be straightforward.
2. To show the username of the current user, from XForms, you can call xxf:get-remote-user(). But the theme XSLT runs after XForms processing, so you can’t use XForms there. Instead, you would need to call Java code, that you call from XSLT: org.orbeon.oxf.util.NetUtils.getExternalContext().getRequest().getRemoteUser().
3. For the role, the servlet API doesn’t allow you to get the user’s roles; you can only check if the user has a specific role with isUserInRole(), which you would call similarly to the getRemoteUser() of point 2.