Re: HTTPS to HTTP loses SessionState in JBoss?

2010-04-08 Thread Christophe Cordenier
Hi, I guess this is due to secured jsessionid cookies. Because you have a public and a private area in your site, two sessions are created. Best Regards, Christophe Cordenier. 2010/4/8 Geoff Callender > My Login page is annotated @Secure and it puts user info into an object > marked @SessionSt

HTTPS to HTTP loses SessionState in JBoss?

2010-04-08 Thread Geoff Callender
My Login page is annotated @Secure and it puts user info into an object marked @SessionState before going to a Welcome page in the usual way. However, problems occur if the Welcome page is not annotated @Secure and I'm running in JBoss. You have to log in twice! The first time, it seems the @