Re: Using CSRF prevention filter with session-timeout workflow resumption

2019-11-21 Thread Konstantin Kolinko
ср, 20 нояб. 2019 г. в 23:36, Christopher Schultz : > > All, > > The servlet spec defines the workflow for form-based authentication: > if the client requests a protected resource, an authorization check is > performed. If the user is unauthenticated, the login form is shown. > Successful login

Re: Using CSRF prevention filter with session-timeout workflow resumption

2019-11-21 Thread Mark Thomas
> Mark, > > On 11/21/19 04:00, Mark Thomas wrote: >>> All, >>> >>> The servlet spec defines the workflow for form-based >>> authentication: if the client requests a protected resource, an >>> authorization check is performed. If the user is unauthenticated, >>> the login form is shown. Successful

Re: Using CSRF prevention filter with session-timeout workflow resumption

2019-11-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 11/21/19 04:00, Mark Thomas wrote: >> All, >> >> The servlet spec defines the workflow for form-based >> authentication: if the client requests a protected resource, an >> authorization check is performed. If the user is unauthenticated,

Re: Using CSRF prevention filter with session-timeout workflow resumption

2019-11-21 Thread Mark Thomas
> All, > > The servlet spec defines the workflow for form-based authentication: > if the client requests a protected resource, an authorization check is > performed. If the user is unauthenticated, the login form is shown. > Successful login allows the user to be sent to the >

Using CSRF prevention filter with session-timeout workflow resumption

2019-11-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, The servlet spec defines the workflow for form-based authentication: if the client requests a protected resource, an authorization check is performed. If the user is unauthenticated, the login form is shown. Successful login allows the user to