DirectBasicAuthClient vs IndirectBasicAuthClient

[mayeulm]

What is the difference between a DirectBasicAuthClient vs IndirectBasicAuthClient?
I understand the general concepts of direct vs indirect client but in the case of IndirectBasicAuthClient I cannot see any redirection and it seem to behave axactly as if I had used a DirectBasicAuthClient.

[Jérôme LELEU]

Hi,

They don't behave the same way in fact. The DirectBasicAuthClient is for web services, so if the credentials are correct, the authentication will only be valid for the current HTTP request (not for the whole web session). In top of that, you can try it as well as others direct clients. For the IndirectBasicAuthClient, only one client will be eventually used to start the login process.

Thanks.

Best regards,

Jérôme

Le jeu. 18 juil. 2019 à 08:45, mayeulm <mayeul.m...@gmail.com> a écrit :

What is the difference between a DirectBasicAuthClient vs IndirectBasicAuthClient?
I understand the general concepts of direct vs indirect client but in the case of IndirectBasicAuthClient I cannot see any redirection and it seem to behave axactly as if I had used a DirectBasicAuthClient.

--
You received this message because you are subscribed to the Google Groups "Pac4j users mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pac4j-users...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/pac4j-users/94efc4d4-f735-4835-9cdf-e99423acf0dc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.