form based logon, how to redirect to the requested page

[claude.glauser]

Hello, I have the following problem with
form based login (webclient, I thik it is
more a j2ee problem than jboss specific):

1. The user requests a protected site

2. JBoss displays a page to enter the password and username

3. If the provided username and passwords are
correct, then the user will be redirected to the requested site (1)

When the user enters a wrong password, then the
user will be redirected to loginerror page.

How can the login-errorpage display a url of the
requested site (1) so that he may enter the username
and password again and will be redirected to the
wanted site ? How can i get this formerly
requested url in the login-errorpage ?



Thanks a lot for your answers !

[sradford]

How about just making the login-error page similar to the login-page with a j_security_check form on it?

[claude.glauser]

Thanks for your answer.

I included the loginform in the loginerrorpage also,
but i get this error when I submit:

No Default Context
There is no default context registered with this server.
Contexts known to this server are:
......

Still, how can I get the wanted url in the login errorpage ?
Sun's petstore application is not of much
help in this context. It just shows a link to the
same page of the petstore and not to the page the user originally
wanted.

Any solutions ?

[lwahana]

I am also having the same problem.
I am hardly trying to solve the problem.

The idea will be to get the information from the 'request' of the original page.

But, it seems that the information from the original page has already gone. This because the security manager interceptor. And I dont even know whether there is a method to get the URL from the request (I havent found it yet)

I am thinking to use custom login form, rather than relying on the web container to intercept it.

But, the only one possible solution left in my mind is by checking the information from security manager directly from the errorpage. I am working on it.
The method will be around this class:
org.jboss.security.Association.*

This is what I can tell.

[lwahana]

The key points are in this article http://www.luminis.nl/publications/websecurity.html