Hi Attila,

 

FORM based authentication is somewhat limited with respect to the use-cases it supports. On your error page include something like:

 

<a href=""javascript:history.go(-1);">Try" again</a>

 

 

This works fine for me. Cheers

 

            --peter

 

650-561-9273

           

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Attila Bodis
Sent: Thursday, May 03, 2001 6:25 PM
To: Orion-Interest
Subject: Form-based authentication: original request URI...?

 

Hi,

 

I managed to get forms-based authentication working (Orion 1.4.5/Win2K), but I have a question.  Here is what happens:

 

    1) user tries to access protected resource "protected.jsp"

 

    2) Orion redirects user to the login page "login.jsp" instead

 

    3) user enters *incorrect* userid/password and submits the form

 

    4) Orion shows the error page "error.jsp", as it should

 

So far, so good, but on the error page I'd like to say something like "click here to retry," with a link to the *original* page that triggered the authentication in the first place (in this case "protected.jsp").  Note that if I put a link to "login.jsp" on the error page, the user will be stuck in a loop as successful authentication will just redisplay the login page itself.

 

The question is:  is there a way (either inside the login page or in the error page) of somehow determining what the original request URI was that triggered the authentication to begin with?  I already tried request.getRequestURI() inside "login.jsp," but it evaluates to "login.jsp," not "protected.jsp" as I'd like.  Clearly Orion stores the original request URI somewhere (otherwise it wouldn't know where to go after a successful login), but how can I get at this information???

 

    Any help would be greatly appreciated!

 

    Attila


 

    Attila Bodis

    Development Manager, Mobile Hosting

    800 Bridge Pkwy #2068

    Redwood Shores, CA 94065

    (650) 506-4767 (w)

    (650) 346-6156 (m)

    [EMAIL PROTECTED]


 

    Visit the OracleMobile Online Studio at http://studio.oraclemobile.com.


 

Reply via email to