When you have a stateless page, no session is created when you land on
such a page first, or to be more precise: a temporary session is
created. So that should explain the difference you see.

Calling Session.get().bind() when logging in should fix that.

Better, call Session.get().replaceSession() when logging in, that
should both solve your problem and fix a potential security hole.



Antoine


On Tue, Mar 16, 2010 at 8:32 PM, Mauro Ciancio <maurocian...@gmail.com> wrote:
> Hello everyone,
>
>  I'm developing an application that uses a lot of bookmarkable links
> in order to
> get pretty urls. When I log in with my user&password, I'm redirected
> to the home page. This
> behavior is ok, but the session appears to be not created, so i still see the
> login link (and not the welcome message 'you are logged in').
>
>  However, if before login I browse a page that contains state and
> then i go to the login page,
> it works well.
>
> I guess the session is not being created, but it should be created
> when I try to login.
>
> Any ideas?
> Cheers.
> --
> Mauro Ciancio <maurociancio at gmail dot com>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
> For additional commands, e-mail: users-h...@wicket.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org

Reply via email to