Hi,

I'd like to create automatic login with the following setup:
- The auto-login key is stored in a secure cookie issued only over https.
- I have created a separate page for this, it can read (a do
authentication) or update the cookie (on form login), and it is
sending the cookie only over https.
- Most of the things the users will land on are http

The HttpsRequestCycleProcessor gives a great job to achieve most of
that, however I'm struggling with the autologin, because I'd like to
do an initial redirect on session create. I can do a redirect to the
cookie page, it will be https, it can send the cookie, however I do
not know how to redirect back to the original page. I have no page nor
pageClass information, because the redirect happens in
WebApplication.newSession(...) and at that time the request.getPage()
is null.

Any idea or example how this should work? I'm storing the cookie
page's redirect information in the session as pageClass and
PageParameters, and these are populated manually, as the origin is
well known.

Thanks,
  Istvan

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to