Single SignOn (Again)

[Migrated From Jforum.net]

Hi,

I have an application that requires users to sign on. I would like to access JForum without users having to sign on again. I tried to follow the guide at the following location: https://coderanch.com/t/574564 .

So I made all the code changes, and after I add the UserSession to the SessionFacade, i try to print out the values. When I run the code, it produces a null pointer exception, at the following statement:

SessionFacade.getUserSession().getUserId()

So it seems like my session was not updated.

So my code looks like this:

 
              // Verify cookies
              //  this.checkCookies();
                      
                UserSession us = new UserSession();
                //got the dummy values after printing out what checkCookies() UserSession returned
                us.setSessionId("717E2BFADACB74D0DAB34D14D3DFE842"); 
                us.setUserId(2);
                us.setUsername("Admin");
                        
                String securityHash = SystemGlobals.getValue(ConfigKeys.USER_HASH_SEQUENCE);
                
                int userId = 2;
                us.setUserId(userId);
                                
                User user = DataAccessDriver.getInstance().newUserModel().selectById(userId);
                UserSessionModel sm = DataAccessDriver.getInstance().newUserSessionModel();

                UserSession tmpUs = sm.selectById(us, JForum.getConnection());
          
                SessionFacade.add(us);
                SessionFacade.setAttribute("topics_tracking", new HashMap());
                        System.out.println("PS: userId:"+SessionFacade.getUserSession().getUserId());

This is all done in JForum.java, right under the "this.checkCookies()" call. I've also added the configureThreadLocal method, but I'm not sure from where it gets called. Also, at the

SessionFacade.add(userSession);

statement, which session do I assign? "tmpUs" or "us"?

I've only been using Java for 6 months, so please feel free to point and laugh at the obvious mistakes!

Thanks,
Pieter
[originally posted on jforum.net by Anonymous]

[Migrated From Jforum.net]

Woha!! Pieter is alive

So Pieter, the problem with your code is that you set a "dummy" session ID, but SessionFacade.getUserSession() makes a call to JForum.getRequest().getSession().getId(), that must probably has a different session id.

You can try using the method getUserSession(String sessionId) .

Rafael
[originally posted on jforum.net by Rafael Steil]

[Migrated From Jforum.net]

Hey Rafael, I think your confusing me with my namesake, Pieter, who wrote the original code for Single Sign-On!

Anyway, your suggestion, along with some other code changes from my part, worked like a charm! Thank you!

Pieter S
[originally posted on jforum.net by Anonymous]

[Migrated From Jforum.net]

Pieter, can you please post your final solution here. It would help me out a ton. I'm trying to do the same thing but also can't figure out where configureThreadLocal gets called from. Thanks so much in advance.
[originally posted on jforum.net by rzavi4jc]