Re: Token question

2005-04-19 Thread Michael J.
On 4/19/05, Derrick Koes <[EMAIL PROTECTED]> wrote: > > if (null == request.getParameter(Constants.TOKEN_KEY)) { > saveToken(request); > } > else { > if (!isTokenValid(request, true)) { > response.sendError(HttpServletResponse.SC_CONFLICT, "The request > received was out >

RE: Token question

2005-04-19 Thread Stunger, Kevin J
I typically save the token in the action responsible for forwarding to the page that displays the form. Then the action that reads the form data can check the token and re-save (and forward to the input page) if the user needs to retry a failed request (not validation related). -Original Mes