I'm using FORM authentication and I would like to hide the login JSP files
so the users don't access them directly. For example, I don't want the user
to be able to enter the URL http://myserver/mywebapp/mylogin.jsp since this
will not work (since there is no original url to redirect them to they get
redirected to j_security_check).
I've tried putting my login files in WEB-INF but then when they try to
access a page in my webapp they get file not found error.
I've tried putting the login files in a secured directory under my webapp
but this puts the ContextManager in an infinite loop.
Any ideas?
Thanks,
Dave