> Specifically, I'm trying to force a remember on the
> username/password entered, even if the browser is
> closed or tomcat is bounced.  
> 
> Any ideas?  :)

even if browser is closed or tomcat is bounced?  that's
a tough one.  :)

maybe you can write a persistent cookie to the browser
with the username/password, and then use javascript to
pre-populate your j_security_check login form if your
cookie is found.

of course this opens up a lot of security issues with
storing usernames and passwords in persistent cookies.

most modern browsers have the capability of remembering
posted form data.  bring that idea to the client and argue
it as allowing the user to make the choice of whether they
want their login/password "remembered".

                    - david -


--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Reply via email to