deltaspike-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "John D. Ament" <john.d.am...@gmail.com>
Subject Re: DS + mfRid/windowdId + Shiro UserFilter/redirectToLogin = infinite redirect loop in browser
Date Tue, 28 May 2013 14:18:38 GMT
Mark,

Perhaps we should provide an alternative OOTB that allows you to disable
this?

John


On Tue, May 28, 2013 at 10:12 AM, Mark Struberg <struberg@yahoo.de> wrote:

> Hi
>
> Just provide a ClientWindowConfig impl which sets the
> ClientWindowRenderMode to NONE.
>
> I've recently posted code samples how to do so.
>
> LieGrue,
> strub
>
>
>
>
> ----- Original Message -----
> > From: titou10 titou10 <titou10.titou10@gmail.com>
> > To: deltaspike-dev@incubator.apache.org
> > Cc:
> > Sent: Tuesday, 28 May 2013, 16:02
> > Subject: DS + mfRid/windowdId + Shiro UserFilter/redirectToLogin =
> infinite
>  redirect loop in browser
> >
> > Hi,
> > With the current snapshot of DS, we have a problem with Shiro and the
> > introduction of the mfRid/windowdId parameters
> > Shiro is configured to redirect to the login page (defines in
> > shiro.ini) if required
> >
> > We use an AJAX compatible Shiro UserFilter as explained here :
> >
> http://balusc.blogspot.ca/2013/01/apache-shiro-is-it-ready-for-java-ee-6.html
> >
> > When this happens, the browser enter an infinite redirect loop,
> > because, I *guess* it's because Shiro does not include the
> > mfRid/windowdId parameters on the login page
> > Q:
> > - Am I right?
> > - Is it possible to exclude some pages (like the login or error pages)
> > from being in need of having those parameters
> > - Maybe it's possible to "add" those parameters in our login
> > pages?
> >
> > It would be a real pain to override a *lot* of Shiro classes to handle
> > the mfRid/windowdId parameters everywhere
> >
> > At this time we can not test/use the current code of DS with our apps.
> >
> > WDYT?
> >
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message