You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@wicket.apache.org by "Gregor B. Rosenauer (JIRA)" <ji...@apache.org> on 2011/03/07 15:30:59 UTC

[jira] Updated: (WICKET-3515) redirect to a SessionExpiredPage when the session expires

     [ https://issues.apache.org/jira/browse/WICKET-3515?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gregor B. Rosenauer updated WICKET-3515:
----------------------------------------

    Description: 
I have the following - quite common I dare say - usecase:

When the user lets the session timeout and tries to access a page of my Wicket application, I want to redirect to a special error page that informs the user the session has timed out.
I don't want to redirect straight to the LoginPage as would be normally done when Wicket automatically calls my overrided getSignInPageClass().
Instead, I want to differentiate between an unauthorised access (without ever having logged in) and a session timeout.

I am aware that I can use a ServletFilter to handle this, but I would prefer to handle this in Wicket.
So I propose to introduce a method similar to getApplicationSettings().setPageExpiredErrorPage, like getApplicationSettings().setSessionExpiredErrorPage.

This page would then be displayed instead of the normal login page when the user tries to access a protected page after a session has timed out.


  was:
I have the following - quite common - usecase:

When the user lets the session timeout and tries to access a page of my Wicket application, I want to redirect to a special error page that informs the user the session has timed out.
I don't want to redirect straight to the LoginPage as would be normally done when Wicket automatically calls my overrided getSignInPageClass().
Instead, I want to differentiate between an unauthorised access (without ever having logged in) and a session timeout.

I am aware that I can use a ServletFilter to handle this, but I would prefer to handle this in Wicket.
So I propose to introduce a method similar to getApplicationSettings().setPageExpiredErrorPage:
{{getApplicationSettings().setSessionExpiredErrorPage}}

This page would then be displayed instead of the normal login page when the user tries to access a protected page after a session timeout.



> redirect to a SessionExpiredPage when the session expires
> ---------------------------------------------------------
>
>                 Key: WICKET-3515
>                 URL: https://issues.apache.org/jira/browse/WICKET-3515
>             Project: Wicket
>          Issue Type: Improvement
>          Components: wicket-core
>            Reporter: Gregor B. Rosenauer
>            Priority: Minor
>
> I have the following - quite common I dare say - usecase:
> When the user lets the session timeout and tries to access a page of my Wicket application, I want to redirect to a special error page that informs the user the session has timed out.
> I don't want to redirect straight to the LoginPage as would be normally done when Wicket automatically calls my overrided getSignInPageClass().
> Instead, I want to differentiate between an unauthorised access (without ever having logged in) and a session timeout.
> I am aware that I can use a ServletFilter to handle this, but I would prefer to handle this in Wicket.
> So I propose to introduce a method similar to getApplicationSettings().setPageExpiredErrorPage, like getApplicationSettings().setSessionExpiredErrorPage.
> This page would then be displayed instead of the normal login page when the user tries to access a protected page after a session has timed out.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira