I use UserService to manage my registrations (Federated and OAuth - Hybrid). I use User.getCurrentUser inside of the app at "various" places (non-servlets too) to determine who the current user is.
I am giving out my API to allow users to call few methods which uses getCurrentUser. I can add a filter and control my authentication but I cannot force UserService to login a user which can be used in the rest of the app - User.getCurrentUser.
I am stumped and am not sure how to continue at this point.
Please help.