Can I use RequestDispatch.include to call j_security_check?

[cyclops49]

web.xml

<url-pattern>/auth/*</url-pattern>

<login-config>
 <auth-method>FORM</auth-method>
 <form-login-page>/MyLogin.jsp</form-login-page>

MyLogin.jsp

<form action="MyLoginServlet">
<input type="text" name="j_username">
<input type="password" name="j_password">

MyLogin.jsp => MyLoginServlet (check username/password and do something else)
=> forward to Redirect.jsp
=> forward to /auth/AuthIndex.jsp (If check pass in MyLoginServlet)

I try to use RequestDispatch.include to call j_security_check before forwrad to AuthIndex.jsp(Login pass), but after forwarded to AuthIndex.jsp, when I try to open other JSPs under /auth, IE kick me to MyLogin.jsp...

Do I miss something? or how to do with programmtic authentication in servlet /JSP?


Note:JBoss ver 3.2.8 sp1 / JDK 1.4.2

[anil.saldhana]

You need to access a resource rather than muck with the form page setup. The container internally redirects u to the form login page and such.

For FORM authentication, the developer only needs to provide the form login page and form error page.