Hi Max, In article <[EMAIL PROTECTED]>, Fri, 27 Feb 2004 12:00:55 +0200, Max Kutny <[EMAIL PROTECTED]> wrote: mkut> No, they are useful ;) At least my servlet container (Resin 2.1.8) mkut> returns login page as 200 response. Moreover, I believe the spec mkut> requires to do exactly the same. So we need to be accurate here in case mkut> the containers interpete the spec differently.
As far as I know, the detailed sequence is not determined as a spec. The spec is only determing the security check url and parameter names to be passed to that url. I've never seen the spec that defines how the sequence should be proceeded. (I may be mislooking something.) So, I believe, response code is depending on the server side implementation. I'm not sure which one of known response codes is widely used in existing servlet containers. But the tomcat implementation, which returns 302, is exist as a reference. So I useed 302 as the default. ---- Kazuhito SUGURI E-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
