I've just set up the most basic implementation of tapestry-security I could to do some testing and have found a bit of an issue which should be very easy to fix:

I've created a page which requires a permission. If, after logging in, I use the loginlink on that page to log out, I am taken to the login page.

I enter the correct username and password, and instead of being taken back to my permission'ed page, I am presented with a 404. The problem is that the redirect url is missing the context path:
http://host/page instead of http://host/context/page

I traced it down to org.tynamo.security.services.impl.PageServiceImpl.redirectToSavedRequest(String)

the 'requestUri' being read from the cookies is just the page name ("/page") part, it doesn't include the context path. It then goes on to call "WebUtils.issueRedirect" however, with the "contextRelative" parameter false.

Either the cookie should be storing the requestUri along with the context path, or the contextRelative parameter should be true.

If this is caused by my configuration in some way, please let me know...

cheers, paul.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org

Reply via email to