I'm not sure if it's in the spec - but Orion does this (and it seems
sensible).

If you create a form with the correct fields (j_username and j_password etc)
and point the form from outside the secure area to inside it - it will log
you in as you 'cross' the boundary. If your login is rejected it takes you
to the failure page defined in web.xml.

Mike


> -----Original Message-----
> From: A mailing list for Enterprise JavaBeans development
> [mailto:[EMAIL PROTECTED]]On Behalf Of dan benanav
> Sent: Friday, 18 February 2000 5:02
> To: [EMAIL PROTECTED]
> Subject: Re: More authentication questions
>
>
> Your solution doesn't seem to work that way.
>
> Here is what I would want.
>
> You type in a URL http::/myurl.com/index.html. That brings you to
> the home page
> which has user  name and password input fields..  In order to get
> into some
> areas of the web site you need to log in.  For others you don't
> need to log in.
>
> After getting to the home page the user might choose to log in,
> after which he
> goes to http://myurl.com/secure/index.html.
>
> He may however choose not to log in and stay in the non secure
> area of the web
> site.
>
> The spec provides a way in which you can have a link to
> http://myurl.com/secure/index.html in the
> http://myurl.com/index.html page.
> But it doesn't provide a way in which you can type in the user
> name and log in
> in the home page and then brought to the secure page.
>
> dan
>
>
>
> Rujith de Silva wrote:
>
> > dan benanav wrote:
> > > Not quite what I would want.  After the use logs in you want him to
> > > go to some specific page.  After logging in go to page X.
> >
> > Amazon has a link on the home-page that says: ``Already a customer?
> > Sign in.''
> >
> > Expedia has a link on the home-page that says: ``Already a member?
> > sign in''.
> >
> > The scheme I outlined was meant to handle such situations.
> >
> > I realize that there are other situations in which a user could be
> > prompted to login.  The scheme I outlined is not meant to handle those
> > situations.
> >
> > Could you describe in more detail what you'd like, such as ``User is
> > looking at this page.  He clicks here to do this. ...'' ?  I don't
> > understand how what you describe differs from what Amazon and Expedia
> > do.
> >
> > - Rujith.
> >
> >
> ==================================================================
> =========
> > To unsubscribe, send email to [EMAIL PROTECTED] and include
> in the body
> > of the message "signoff EJB-INTEREST".  For general help, send email to
> > [EMAIL PROTECTED] and include in the body of the message "help".
>
> ==================================================================
> =========
> To unsubscribe, send email to [EMAIL PROTECTED] and include
> in the body
> of the message "signoff EJB-INTEREST".  For general help, send email to
> [EMAIL PROTECTED] and include in the body of the message "help".
>
>

===========================================================================
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff EJB-INTEREST".  For general help, send email to
[EMAIL PROTECTED] and include in the body of the message "help".

Reply via email to