tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nicholas Sushkin <>
Subject Re: Should Form Authentication Valve restore request body on a PUT?
Date Fri, 07 Oct 2011 20:07:20 GMT
Before being forwarded to login page, the request is saved and only then 
turned into GET, before dispatching the forward to the login page. After login 
form is submitted, the original request is restored from the saved state and 
is replayed.

On Friday, October 07, 2011 12:51:48 Caldarale, Charles R wrote:
> I'm confused.  If you turn a PUT into a GET, it would seem that the request
> will likely be badly mishandled once the login process is complete and the
> original request is sent on to the target servlet/JSP.  Am I missing
> something?
>  - Chuck
Nicholas Sushkin, Senior Software Engineer, Manager of IT Operations
Open Finance - Secure, Accurate, Industrial Strength Aggregation
View raw message