My Login page is annotated @Secure and it puts user info into an object marked 
@SessionState before going to a Welcome page in the usual way. 

However, problems occur if the Welcome page is not annotated @Secure and I'm 
running in JBoss.  You have to log in twice! The first time, it seems the 
@SessionState object is lost by the time the render request for Welcome comes 
in and hits ProtectedPageGateKeeper (a Dispatcher). So ProtectedPageGateKeeper 
thinks the user isn't logged in and redirects to the Login page. 

Oddly, the second attempt to login works. 
Also oddly, the problem doesn't occur in my dev environment that runs Jetty.

I'm handling the HTTPS in Apache (mod_ssl) and using proxying (mod_proxy) via 
AJP to Jetty or JBoss. In httpd.conf and extra/httpd-ssl.conf...

    ProxyPass    /jumpstart    ajp://127.0.0.1:8009/jumpstart retry=5
    ProxyPassReverse    /jumpstart  ajp://127.0.0.1:8009/jumpstart

Anyone else had a similar problem?

Geoff
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org

Reply via email to