tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 13258] New: - During form-based authentication a POST turns into a GET
Date Thu, 03 Oct 2002 19:53:21 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13258>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13258

During form-based authentication a POST turns into a GET

           Summary: During form-based authentication a POST turns into a GET
           Product: Tomcat 4
           Version: 4.1.10
          Platform: All
        OS/Version: Other
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: glenn@somanetworks.com


Using form-based container managed security, when your session times out and you
submit a POST form you get correctly redirected to the login page.  If you
correctly authenticate, your POST becomes a GET, and all of your parameters are
lost.

127.0.0.1 - - [03/Oct/2002:13:40:19 -0500] "POST /cm/blah HTTP/1.1" 302 -
127.0.0.1 - - [03/Oct/2002:13:40:19 -0500] "GET /cm/login HTTP/1.1" 200 1647
127.0.0.1 - - [03/Oct/2002:13:40:29 -0500] "POST /cm/j_security_check HTTP/1.1"
302 -
127.0.0.1 - admin [03/Oct/2002:13:40:29 -0500] "GET /cm/blah HTTP/1.1" 200 4577

--
To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@jakarta.apache.org>


Mime
View raw message