It's a well known gotcha but nothing we can or plan to do about except
to improve documentation. Also note that the order in which the rules
are contributed is significant.
Kalle
On Mon, Sep 24, 2012 at 9:11 AM, Alex Kotchnev <akoch...@gmail.com> wrote:
> The problem w/ the wildcard statement is that when Shiro tries to redirect
> it to the login page, the login page ends up requiring authentication
> (because it matches the /* wildcard pattern), etc. In order to make it do
> what you want, you'll need to allow the login page to be accessed w/o
> authentication (which makes sense) before you declare the filter for /*,
> e.g.
>
> <code>
> configuration.add(factory.createChain("/login").add(factory.anon()).build());
> configuration.add(factory.createChain("/**").add(factory.authc()).build());
> </code>
>
> Cheers,
>
> Alex K
>
> On Mon, Sep 24, 2012 at 6:20 AM, indiancomet <fauj...@gmail.com> wrote:
>
>> Hi,
>> I am trying to use Shiro via tapestry-security. It has been a hits-n-misses
>> so far.
>> Nevertheless, it has been a good learning experience.
>> However, I have run into one specific case with filters which i thought
>> would post here for insight.
>>
>> When i use the following filter:
>> <code>
>> configuration.add(factory.createChain("/**").add(factory.authc()).build());
>> </code>
>>
>> I get stuck in a loop on the login form.
>>
>> However, if i add page specific filters like:
>> <code>
>>
>> configuration.add(factory.createChain("/page1").add(factory.authc()).build());
>> </code>
>>
>> and then try to access page1, i get the login form. On putting correct
>> login
>> values i am taken to page1.
>>
>> Can someone explain this behaviour?
>>
>>
>>
>>
>> --
>> View this message in context:
>> http://tapestry.1045711.n5.nabble.com/Tapestry-Security-Filter-settings-tp5716466.html
>> Sent from the Tapestry - User mailing list archive at Nabble.com.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
>> For additional commands, e-mail: users-h...@tapestry.apache.org
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org
