You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by fm...@apache.org on 2008/05/28 13:48:53 UTC

svn commit: r660909 - /incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java

Author: fmeschbe
Date: Wed May 28 04:48:53 2008
New Revision: 660909

URL: http://svn.apache.org/viewvc?rev=660909&view=rev
Log:
SLING-480 After changing the login servlet to send the authentication
request as POST instead of GET, the LoginServlet should also be
registered to handle POST requests to prevent the default Sling
POST servlet to be triggered.

Modified:
    incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java

Modified: incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java
URL: http://svn.apache.org/viewvc/incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java?rev=660909&r1=660908&r2=660909&view=diff
==============================================================================
--- incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java (original)
+++ incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java Wed May 28 04:48:53 2008
@@ -23,18 +23,19 @@
 
 import org.apache.sling.api.SlingHttpServletRequest;
 import org.apache.sling.api.SlingHttpServletResponse;
-import org.apache.sling.api.servlets.SlingSafeMethodsServlet;
+import org.apache.sling.api.servlets.SlingAllMethodsServlet;
 
 /**
  * The <code>LoginServlet</code> TODO
- *
+ * 
  * @scr.component metatype="no"
  * @scr.service interface="javax.servlet.Servlet"
  * @scr.property name="service.description" value="HTTP Header Login Servlet"
  * @scr.property name="service.vendor" value="The Apache Software Foundation"
  * @scr.property name="sling.servlet.paths" value="/system/sling/login"
+ * @scr.property name="sling.servlet.methods" values.0="GET" values.1="POST"
  */
-public class LoginServlet extends SlingSafeMethodsServlet {
+public class LoginServlet extends SlingAllMethodsServlet {
 
     @Override
     protected void doGet(SlingHttpServletRequest request,
@@ -60,6 +61,12 @@
         epilog(pw);
     }
 
+    @Override
+    protected void doPost(SlingHttpServletRequest request,
+            SlingHttpServletResponse response) throws IOException {
+        response.sendRedirect(request.getRequestURI());
+    }
+
     private void login(PrintWriter pw, String contextPath) {
 
         pw.println("<script>");