jboss3.2 j_security_check

[worthe]

I think there is a bug in the FORM login code when the login page includes some images. After a successful
login (using the spi.UsersRolesLoginModule) it forwards me to an image
on my login page rather than the correct forwarding address?? I have
gotten past this by putting a dummy image in with the url I want it to
go to.

Anyone have any info on this?

[haraldgliebe]

Is the image on your login page in a secured part of your webapp? If yes, then the request for the image comes after the original request and after successful authentication, the web container will forward to the last secure URL the client tried to access (which is the image in your case).
To avoid this behaviour, use only non-secured images on the login-page.

Regards,
Harald

[worthe]

thank you very much.