Re: [securityfilter-user] Start page

[Christopher S. <ch...@ch...>]

Torgeir,

On 2/13/2009 7:41 PM, Torgeir Veimo wrote:
> On 14 Feb 2009, at 07:52, Martin Dubuc wrote:
> 
>> I would like to confirm first of all that I can force securityfilter  
>> to load a specific page after a login that was requested because of  
>> a session timing out. If it is the case, I am wondering if there are  
>> any signs I could monitor to help figure out why I am presented with  
>> a blank page.
> 
> Securityfilter redirects to the page which the user tried to load  
> before the login page. It only goes to the stat page if no previous  
> page was requested, eg the user went directly to the login page. If  
> you need different behaviour, you probably have to patch securityfilter.

The CVS version of securityfilter allows you to override the page you go
to after login, regardless of any previously-saved request.

Along with your credentials, you can provide the following parameters to
j_security_check:

param name		value
forward			The URL to forward to.
forward-mode		"forward" or "redirect" (default=redirect)
forward-parameters	"true" or "false" (default=false)

That last parameter can be used to have securityfilter include all the
parameters sent to the login form along to the 'forward' URL. The
credentials as well as the 'forward' configuration parameters are all
removed from any query string used for redirection.

If you read the code for FormAuthenticator.java, you'll see all these
parameters documented at the top of the class.

-chris