That seems to make sense on first read. But... 

1) I make a request for a protected resource, say my_portal.jsp, which
contains an image.
2) The container says: "that's a protected resource" and redirects.
3) It authenticates and remembers that my_portal.jsp was the protected
resource asked for.
 
1) Was Tomcat really implemented to send to the 'last' resource
requested? That seems like.. one way of doing it.  Why not send to the
resource that invoked the authentication mechanism? (Is it *always* the
last?)
 
2) When did the HTML for my_portal.jsp ever get delivered to my browser,
so that it could access the 'protected' image file, resulting in it
being the 'last' resource requested ? No HTML should be sent until after
step 3) above, so is Tomcat psychic?

 


> -----Original Message-----
> From: Tim Funk [mailto:[EMAIL PROTECTED] 
> Sent: Monday, July 14, 2003 10:53 AM
> To: Tomcat Users List
> Subject: Re: JDBCRealm - Login redirects to my image instead
> 
> 
> (Guessing)
> Put the image in an unprotected area. Since the image was the 
> most recent 
> request under a secutiry contraint, you are being redirected 
> to that request 
> on successfull login.
> 
> -Tim
> 
> Rick Roberts wrote:
> >> I have JDBCRealm and Form Based AUTH.
> >>
> >> I have an image in my login.jsp file.
> >> Like this:
> >> <IMG src='/myApp/images/myImage.gif' width='250' height='75'>
> >>
> >> When I navigate to myApp/index.jsp, I get redirected to my 
> login.jsp
> >> file (just as I should).
> >> But, when I login, I get redirected to the image referenced in 
> >> login.jsp, instead of to index.jsp.
> >>
> >> It kinda makes since that this would happen, because 
> j_security_check
> >> sees the image file as the first target file to load.
> >>
> >> However; it is not what I want to happen.
> >>
> >> I could remove my <IMG> and everything works fine. But, I'd rather
> >> figure out how to keep my <IMG> in login.jsp and get redirected to 
> >> index.jsp.
> >>
> >> Anyone know how to do this?
> >>
> > 
> > Something I forgot to mention:
> > 
> > When login.jsp loads up, it does not load up the image.
> > Then when I enter the UID & PWD j_security_check sends me 
> to the image
> > that did not loadup.
> > 
> > If I take the image out of login.jsp, then it works like I think it 
> > should.
> > 
> > Anyone know how to use an image in login.jsp?
> > 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to