DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=34071>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=34071 Summary: Session attribute disappear under SSL Product: Struts Version: 1.2.4 Platform: PC OS/Version: Windows 2000 Status: NEW Severity: major Priority: P2 Component: Controller AssignedTo: dev@struts.apache.org ReportedBy: [EMAIL PROTECTED] I have a page that should be accessed under SSL. The page also requires authentification and before forward to that page, user must login first. Since the custom RequestProcessor is responsible for all requests, in case that page requires authentification, some parameters have been set, including session attribute, keeping the URL of the page (e.g. https://localhost:8443/app/myPage.do). After setting, request and response objects are forwarded to the login action, using RequestDispatcher (dispatcher.forward(request, response);) In the login action, when printing value from the session attribute, I have correct value. After login form is submitted (request processor is called and request is forwarded to the login action for further processing), after printing value from session attribute, the result is NULL. The same scenario works perfect for all non-secure URLs. Is there a problem with my request processor or the problem is with Struts? -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]