There are two main solutions:
The first one is more effective, including JAAS.
You have to make a form that call j_security_check action with j_password
and j_username inputs, the web server has its own security engine that
throws you to your first login page if you are not authorized.
The
I've added some files as an example. How i manage the user sessions.
- Original Message -
From: Arik Levin ( Tikal ) [EMAIL PROTECTED]
To: 'Struts Users Mailing List' [EMAIL PROTECTED]
Sent: Tuesday, December 31, 2002 11:59 AM
Subject: RE: How to forward from a struts form to a login
Hello,
Thanks for the classes, I am doing the same
thing.
Question:
- What's the advantage of using the entry in
web.xml (maybe you can also send web.xml?),
and doing the naming lookups, etc. versus
just storing an object in a HttpSession and
checking if it is null or not (as you are
doing as
Oh, one more thing.
Note how in this servlet filter some
application-specific URIs are hard-coded.
It would be more elegant, IMHO, to declare
those elsewhere.
Also, instead of sending a redirect to a
hard-coded URI, one could use sendError with
401 code (unauthorized) and then handle 401
Hi,
in a struts form I want to check whether to user has already logged in. If
not, instead of showing the form I want to forward the user to a login dialog
and he must log in. After the user logged in, I want him to come back to the
form and I have to restore the original parameters of the
ZK Hi, in a struts form I want to check whether to user has already
ZK logged in. If not, instead of showing the form I want to forward the
ZK user to a login dialog and he must log in. After the user logged in, I
ZK want him to come back to the form and I have to restore the original
ZK
Ok, but how?
Zsolt
On Thursday 07 November 2002 11:14, Max Kutny wrote:
Move authentication to container level
--
To unsubscribe, e-mail: mailto:struts-user-unsubscribe;jakarta.apache.org
For additional commands, e-mail: mailto:struts-user-help;jakarta.apache.org
7 matches
Mail list logo