Hi, I guess this is due to secured jsessionid cookies. Because you have a public and a private area in your site, two sessions are created.
Best Regards, Christophe Cordenier. 2010/4/8 Geoff Callender <geoff.callender.jumpst...@gmail.com> > My Login page is annotated @Secure and it puts user info into an object > marked @SessionState before going to a Welcome page in the usual way. > > However, problems occur if the Welcome page is not annotated @Secure and > I'm running in JBoss. You have to log in twice! The first time, it seems > the @SessionState object is lost by the time the render request for Welcome > comes in and hits ProtectedPageGateKeeper (a Dispatcher). So > ProtectedPageGateKeeper thinks the user isn't logged in and redirects to the > Login page. > > Oddly, the second attempt to login works. > Also oddly, the problem doesn't occur in my dev environment that runs > Jetty. > > I'm handling the HTTPS in Apache (mod_ssl) and using proxying (mod_proxy) > via AJP to Jetty or JBoss. In httpd.conf and extra/httpd-ssl.conf... > > ProxyPass /jumpstart ajp://127.0.0.1:8009/jumpstart retry=5 > ProxyPassReverse /jumpstart ajp://127.0.0.1:8009/jumpstart > > Anyone else had a similar problem? > > Geoff > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org > For additional commands, e-mail: users-h...@tapestry.apache.org > > -- Regards, Christophe Cordenier. Developer of wooki @wookicentral.com