Where have my request parameters gone?

[dhinojosa]

Hey JBoss users (we need a nickname):

I have the form based security and ejb security working fine and sweet, I have one problem though. Since the container is managing security, the request parameters are not saved after authentication.

For example





No lets say that ./MyServlet is required for authentication. The Form based login appears to the user and logs in, the user is authenticated, and resumes to ./MyServlet. The problem is ./MySerlvet has no idea what the request Parameters were, specifically what the value of "myField" was. Can I resolve this somehow?

P.S. I would like to do the this without using a get method, I would like to use post. : )
Thanks,
Danno

[lothar]

According to the servlet spec there are no requirements for the container to store anything else than the request url (and the get params with it) and Tomcat behaves exactly so - it stores the request url and then redirects the user back to it. So the simplest solution is using GET instead of POST. If you must use POST i recommend that you extend your security restrictions to the page which holds the form and perform a check on the destination page for the presence of the form fields. Or you can rewrite the org.apache.tomcat.request.AccessInterceptor to do the storing of POST params for you.

[dhinojosa]

Thanks Lothar.

[redhonda]

Anyone has an example that solves this problem? I am also having the same problem.

Thanks