Author: fmeschbe
Date: Wed May 28 04:48:53 2008
New Revision: 660909
URL: http://svn.apache.org/viewvc?rev=660909&view=rev
Log:
SLING-480 After changing the login servlet to send the authentication
request as POST instead of GET, the LoginServlet should also be
registered to handle POST requests to prevent the default Sling
POST servlet to be triggered.
Modified:
incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java
Modified:
incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java
URL:
http://svn.apache.org/viewvc/incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java?rev=660909&r1=660908&r2=660909&view=diff
==============================================================================
---
incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java
(original)
+++
incubator/sling/trunk/extensions/httpauth/src/main/java/org/apache/sling/httpauth/impl/LoginServlet.java
Wed May 28 04:48:53 2008
@@ -23,18 +23,19 @@
import org.apache.sling.api.SlingHttpServletRequest;
import org.apache.sling.api.SlingHttpServletResponse;
-import org.apache.sling.api.servlets.SlingSafeMethodsServlet;
+import org.apache.sling.api.servlets.SlingAllMethodsServlet;
/**
* The <code>LoginServlet</code> TODO
- *
+ *
* @scr.component metatype="no"
* @scr.service interface="javax.servlet.Servlet"
* @scr.property name="service.description" value="HTTP Header Login Servlet"
* @scr.property name="service.vendor" value="The Apache Software Foundation"
* @scr.property name="sling.servlet.paths" value="/system/sling/login"
+ * @scr.property name="sling.servlet.methods" values.0="GET" values.1="POST"
*/
-public class LoginServlet extends SlingSafeMethodsServlet {
+public class LoginServlet extends SlingAllMethodsServlet {
@Override
protected void doGet(SlingHttpServletRequest request,
@@ -60,6 +61,12 @@
epilog(pw);
}
+ @Override
+ protected void doPost(SlingHttpServletRequest request,
+ SlingHttpServletResponse response) throws IOException {
+ response.sendRedirect(request.getRequestURI());
+ }
+
private void login(PrintWriter pw, String contextPath) {
pw.println("<script>");