Session Timeout, display after login

[cmathrusse]

RichFaces 3.3.1 GA

Our application is secured with an LDAP Realm so the user is presented with a login page the first time the application is accessed. All works very well except for when the users session expires. The application is still displayed and when the user clicks on a link the login page is then presented. (This is expected) The problem is that when the user authenticates (after a timeout) and the login is successful, there is no page rendered. Its simply a blank page.

To get the applicaiton to render the user must click on the original link to the applicaiton root. This is no big deal but a slight inconvenience. I'd like to take the user to the requested page from the link clicked. Or, ideally, I'd like to automatically display the login page once the session expires.

How are others handling this issue and what options do I have?

Thanks for the help....

[ilya_shaikovsky]

how did you redirects the users to loging page? Provide code details.

[cmathrusse]

The user is directed/redirected to the login by the container. I have the following defined in web.xml:

<login-config>
 <auth-method>FORM</auth-method>
 <realm-name>ldap</realm-name>
 <form-login-config>
 <form-login-page>/login.jsp</form-login-page>
 <form-error-page>/logonError.jsp</form-error-page>
 </form-login-config>
 </login-config>

This allows the container to present the user with the login page when there is no session. When the users session times out, the container will automatically present the user with the login page.

[nbelaevski]

Hi,

AJAX requests do not support form-based authentication well. What browser is used?

[cmathrusse]

Both IE and Firefox are being supported. As far as Form Based authentication goes, I've had no issues with this implementation other than the timeout issue.

[nbelaevski]

You can set login.jsf as error page for ViewExpiredException.