Re: Tomcat Form Authentication Timeout Behavior

2012-02-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jess, On 2/1/12 2:10 PM, Jess Holle wrote: > I've noticed that if I POST to an authenticated URL in a web app > configured for form-based authentication, Tomcat delivers the login > form, and then replays the POST just fine *unless* the current > sta

Tomcat Form Authentication Timeout Behavior

2012-02-01 Thread Jess Holle
I've noticed that if I POST to an authenticated URL in a web app configured for form-based authentication, Tomcat delivers the login form, and then replays the POST just fine *unless* the current state of the browser is one where I had already been authenticated but that session had timed out.