Re: Should tomcat form login offer redirects to login page besides forward?

2016-02-17 Thread Bernhard Lenz
Hi Mark. You were absolutely right about a redirect not being as simple as it sounds. It turns out tomcat is relying on the HTTPSession to store the original request which obviously fails in this case since the HTTPSession is not shared between different web apps. Additionally the Principal, usern

Re: Should tomcat form login offer redirects to login page besides forward?

2016-02-04 Thread Bernhard Lenz
Hi Mark. Unfortunately CAS doesn't support Tomcat 8 or 9 and the documentation is often outdated and sometimes messy. I feel Tomcat is so close to perfect with its SingleSignOn valve and Realms that supporting a global login page is just the dot on the I. I'm new to the apache process... How can

Re: Should tomcat form login offer redirects to login page besides forward?

2016-02-04 Thread Mark Thomas
On 04/02/2016 17:58, Bernhard Lenz wrote: > Are there any Tomcat developers in this forum that would like to pick up > below suggestion? I'm very interesting in hearing your opinion. Web applications are meant to be independent. Instinct tells me to expect a lot of tricky edge cases. I think tha

Re: Should tomcat form login offer redirects to login page besides forward?

2016-02-04 Thread Bernhard Lenz
Are there any Tomcat developers in this forum that would like to pick up below suggestion? I'm very interesting in hearing your opinion. Sincerely Bernie On Wed, Jan 27, 2016 at 3:54 PM, Bernhard Lenz wrote: > I'm currently researching an architectural issue which has been pondering > me for qu

Should tomcat form login offer redirects to login page besides forward?

2016-01-27 Thread Bernhard Lenz
I'm currently researching an architectural issue which has been pondering me for quite some time now. Tomcat is probably one of the most widely used web servers out there. It has some really nice build in features to implement authentication and authorization using Form Based Authentication and th