You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by bu...@apache.org on 2002/10/03 21:53:21 UTC

DO NOT REPLY [Bug 13258] New: - During form-based authentication a POST turns into a GET

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13258>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13258

During form-based authentication a POST turns into a GET

           Summary: During form-based authentication a POST turns into a GET
           Product: Tomcat 4
           Version: 4.1.10
          Platform: All
        OS/Version: Other
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: glenn@somanetworks.com


Using form-based container managed security, when your session times out and you
submit a POST form you get correctly redirected to the login page.  If you
correctly authenticate, your POST becomes a GET, and all of your parameters are
lost.

127.0.0.1 - - [03/Oct/2002:13:40:19 -0500] "POST /cm/blah HTTP/1.1" 302 -
127.0.0.1 - - [03/Oct/2002:13:40:19 -0500] "GET /cm/login HTTP/1.1" 200 1647
127.0.0.1 - - [03/Oct/2002:13:40:29 -0500] "POST /cm/j_security_check HTTP/1.1"
302 -
127.0.0.1 - admin [03/Oct/2002:13:40:29 -0500] "GET /cm/blah HTTP/1.1" 200 4577

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>