I’m working on integrating CAS in a legacy Java application. It’s looking promising at the moment but I’m a bit confused as to where to handle the ‘on-login’ logic. The app relies on certain session variables being set when the user logs in. How can I handle this in my application?
i.e. User A has logs into client app A and decides he wants to do something in client B.
Since he’s authenticated in client A, he is automatically authenticated and logged into client B. Since he wasn’t logged into client B before (i.e. this is a new session) some house-keeping tasks need to take place. I’m a bit confused as to how and where I can take care of these tasks?
The way to do this (or at the least the way I approached it) would be within a filter that is run after the CAS has completed.