My Login page is annotated @Secure and it puts user info into an object marked @SessionState before going to a Welcome page in the usual way.
However, problems occur if the Welcome page is not annotated @Secure and I'm running in JBoss. You have to log in twice! The first time, it seems the @SessionState object is lost by the time the render request for Welcome comes in and hits ProtectedPageGateKeeper (a Dispatcher). So ProtectedPageGateKeeper thinks the user isn't logged in and redirects to the Login page. Oddly, the second attempt to login works. Also oddly, the problem doesn't occur in my dev environment that runs Jetty. I'm handling the HTTPS in Apache (mod_ssl) and using proxying (mod_proxy) via AJP to Jetty or JBoss. In httpd.conf and extra/httpd-ssl.conf... ProxyPass /jumpstart ajp://127.0.0.1:8009/jumpstart retry=5 ProxyPassReverse /jumpstart ajp://127.0.0.1:8009/jumpstart Anyone else had a similar problem? Geoff --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org For additional commands, e-mail: users-h...@tapestry.apache.org