You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@struts.apache.org by bu...@apache.org on 2005/03/18 11:53:47 UTC

DO NOT REPLY [Bug 34071] New: - Session attribute disappear under SSL

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=34071>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=34071

           Summary: Session attribute disappear under SSL
           Product: Struts
           Version: 1.2.4
          Platform: PC
        OS/Version: Windows 2000
            Status: NEW
          Severity: major
          Priority: P2
         Component: Controller
        AssignedTo: dev@struts.apache.org
        ReportedBy: nikola.radic@eurodyn.com


I have a page that should be accessed under SSL. The page also requires 
authentification and before forward to that page, user must login first.

Since the custom RequestProcessor is responsible for all requests, in case that 
page requires authentification, some parameters have been set, including 
session attribute, keeping the URL of the page (e.g. 
https://localhost:8443/app/myPage.do). After setting, request and response 
objects are forwarded to the login action, using RequestDispatcher 
(dispatcher.forward(request, response);)

In the login action, when printing value from the session attribute, I have 
correct value.

After login form is submitted (request processor is called and request is 
forwarded to the login action for further processing), after printing value 
from session attribute, the result is NULL.

The same scenario works perfect for all non-secure URLs.

Is there a problem with my request processor or the problem is with Struts?

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org