login error: direct reference to form login page

[Klaas van der Ploeg <kl...@hotmail.com>]

Hi All,

I'm using Tomcat 4.1.12/JDK1.4.0_01/Struts

I have multiple webapps where one of the webapps is the main entry point for 
the other webapps (contains menu, etc...).
I use security constraints and form-based login to control access to the 
applications with SingleSignOn.

Customers requirement is: after logging of, they want to return to the login 
page, so that a new user can immidiately login to the application. The 
application is running on a PocketPC 2002 handterminal with Pocket IE.

Problem: the time between the last action (logout) and the new action 
(login) might be longer than the session timeout. In that case, the url 
originally requested is not available in the users session anymore, causing 
a 400-error:incorrect direct reference to form login page.

I checked the FormAuthenticator class, and the behaviour is correct from 
that point of view (savedRequestURL(Session session) returns null).

Is there a solution which lets the user be on the loginpage, while keeping 
the target url somewhere hidden (in a form-field in the login-page?), which 
is the alternative if no url is found in the session?
Or maybe something else?

Your input is highly appreciated!

Regards,
Klaas











_________________________________________________________________
MSN 8 with e-mail virus protection service: 3 months FREE*. 
http://join.msn.com/?page=features/virus&xAPID=42&PS=47575&PI=7324&DI=7474&SU= 
http://www.hotmail.msn.com/cgi-bin/getmsg&HL=1216hotmailtaglines_eliminateviruses_3mf


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>