Hi,
Orion 1.4.5 doesn't remember the original target URL correctly after an
incorrect login.
This bug is fixed in 1.4.8.
What works for me is:
- In the errorpage I display some additional information to the user and
then forward the request to the original loginpage (using
RequestDispatcher) to have exactly the same form displayed in both
cases.
Also after logging in from the form in the errorpage orion directs you
to the original target.
hope it helps,
Peter
Attila Bodis wrote:
> Hi, I managed to get forms-based authentication working (Orion
> 1.4.5/Win2K), but I have a question. Here is what happens: 1)
> user tries to access protected resource "protected.jsp" 2) Orion
> redirects user to the login page "login.jsp" instead 3) user
> enters *incorrect* userid/password and submits the form 4) Orion
> shows the error page "error.jsp", as it should So far, so good, but on
> the error page I'd like to say something like "click here to retry,"
> with a link to the *original* page that triggered the authentication
> in the first place (in this case "protected.jsp"). Note that if I put
> a link to "login.jsp" on the error page, the user will be stuck in a
> loop as successful authentication will just redisplay the login page
> itself. The question is: is there a way (either inside the login page
> or in the error page) of somehow determining what the original request
> URI was that triggered the authentication to begin with? I already
> tried request.getRequestURI() inside "login.jsp," but it evaluates to
> "login.jsp," not "protected.jsp" as I'd like. Clearly Orion stores
> the original request URI somewhere (otherwise it wouldn't know where
> to go after a successful login), but how can I get at this
> information??? Any help would be greatly appreciated!
> Attila Attila Bodis Development Manager, Mobile Hosting 800
> Bridge Pkwy #2068 Redwood Shores, CA 94065 (650) 506-4767 (w)
> (650) 346-6156 (m) [EMAIL PROTECTED] Visit the
> OracleMobile Online Studio at http://studio.oraclemobile.com.
