Laird Nelson wrote:
>
> Assaf Arkin wrote:
> > I think the fields should be j_username and j_password, but I'm away
> > from the specs, so you have to check there.
>
> Wait, there are specifications somewhere that tell me what to name
> fields on a web form such that automatic authentication will occur? How
> wonderful. Where are they, and who has implemented them?
>From the servlet 2.2 spec:
"The look and feel of the �login screen� cannot be controlled with an HTTP browser�s
built in
authentication mechanisms. Therefore this specification defines a form based
authentication
mechanism which allows a Developer to control the look and feel of the login screens.
The web application deployment descriptor contains entries for a login form and error
page to be
used with this mechanism. The login form must contain fields for the user to specify
username and
password. These fields must be named �j_username� and �j_password�, respectively."
________________________________________________________________________________
Evan Ireland Sybase EA Server Engineering [EMAIL PROTECTED]
Wellington - New Zealand +64 4 934-5856
===========================================================================
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff EJB-INTEREST". For general help, send email to
[EMAIL PROTECTED] and include in the body of the message "help".
