Thanks for ideas. Is there a way to know current page so that the protected page can redirect to the current page? some thoughts: when user click Login link, the current page back bean method login() is executed and remember the current request URL(it is the current page) in a session scope bean. Then nagivation handler redirect to the protected page(forward will bypass security model), then the protected page redirect to the current page (kept in sessin bean). It needs Two redirect(s). The second redirect can be forwarding, but browser shows the URL of the protected page. It is better to hide the protected page that is a dummy page only for redirecting. Is there a better way?
There are many web sites out there that show the login form directly on the page. User can type username and password directly and submit the form. It is not a Login link to a protected page. Is it a servlet security model?
Thanks. Dave
Ryan Wynn <[EMAIL PROTECTED]> wrote:
Don't know if this works but could you have the login link on each unsecure page link to a secured page passing the path back to itself. The secured page is just a redirect to the page that linked to it.
response.sendRedirect(request.getParameter("pathToFrom"));
=======================================
Ryan Wynn
Websphere Portal Developer
IBM Business Consulting Services - Public Sector
Reston Office: 703-668-2478
Cell: 703-622-1977
[EMAIL PROTECTED]
Dave <[EMAIL PROTECTED]> 09/27/2005 02:42 PM
"MyFaces Discussion"
[email protected] login without protected pages
I have several pages that are not protected JSPs. On each page, there is a Login link. It allows user to login in any page, and page shows up differently according to whether the user is unauthenticated or not, and his/her roles. The Servlet security model needs a protected page to initiate a login. But in my case, all pages are shared by all users including unauthenticated users. How can I implement this? Thanks. Dave
Yahoo! for Good
Click here to donate to the Hurricane Katrina relief effort.
Yahoo! for Good
Click here to donate to the Hurricane Katrina relief effort.
