Sure, if you don't have a common layout etc you use for you Wicket pages and you want to reuse in your login page, that's even more efficient. You'll have to make it a separate HTML file in a path that is not handled by Wicket though, so it's a bit more pain to achieve.
Eelco On 4/19/07, Igor Vaynberg <[EMAIL PROTECTED]> wrote: > its even better not to have a wicket page at all > > a simple loginl.html with > > <form action="/some/mounted/page" method="post"> > <input name="uname"/><input name="pwd"/><input type="submit"/> > </form> > > then you just mount a page that processes the submitted values and throws a > restartresponseexception to some other page. > > now as users hammer your login page and stare at it for hours it is only > apache that suffers. > > taking it to the next level baby! > > -igor > > > > On 4/19/07, Eelco Hillenius <[EMAIL PROTECTED] > wrote: > > > > > A last question : what does precisely the session.invalidate stuff ? > > > Indeed, in my application, when checking if the user is logged in, I > > > just check whether an user is in the current session. As such, to > > > "unlog" my user, I just need to do something like > > > session.setUser(null). So I wonder what does precisely the invalidate > > > (and as such whether I really need to do it or not). I checked on the > > > API already and there is just :"Invalidates this session." > > > > Invalidate 'unbinds' the session from the backing session store. In > > practice, for default configurations, this means that the HttpSession > > object that is maintained for the client is invalidated (see > > HttpSession#invalidate) after the request is done, so that a client > > starts with a clean slate. > > > > Off topic, I think it's good practice to make your login page a > > stateless page (using a stateless form), so that users can have that > > page in front of them for hours and then sign in without even being > > bothered with a session expiry exception. In fact, it's probably good > > practice to have the whole part of the site where you don't require > > users to log in implemented as stateless and/ or bookmarkable pages. > > My 2c. > > > > Eelco > > > > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by DB2 Express > > Download DB2 Express C - the FREE version of DB2 express and take > > control of your XML. No limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > _______________________________________________ > > Wicket-user mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/wicket-user > > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Wicket-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/wicket-user > > ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Wicket-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/wicket-user
