Validate using the CF Administrator password

[Andrew (Webworld)]

I figure I am not the first to want to do this but my searches have not yielded
any results. I'd like to have a login page similar to the ColdFusion
Administrator page that checks to make sure the user has the CF Administrator
password. I don't need my code to know what the password is and I doubt the
password itself is sitting somewhere obvious unless it's hashed or encrypted
somehow. I was simply wondering if there are any hooks into the system that I
could call and pass a password entered by the user that would tell me that they
do in fact have the CF Admin password?

[Andrew (Webworld)]

Ok, I believe I have figured this one out. You need to use the ColdFusion
factory service. You can test to see if the password the user enters is in fact
the ColdFusion Administrator password by doing the following:

<cfobject type="JAVA" action="Create" name="factory"
class="coldfusion.server.ServiceFactory">
<cfset bValid = factory.SecurityService.checkAdminPassword('#form. password#')>
<cfoutput>#bValid#</cfoutput>

Hope this helps someone else. The factory service gives you a lot of other
hooks into CF that you can use by the way say for instance getting a list of
the datasources defined.