Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of 2ndgenfilms@gmail.com
 designates 209.85.213.173 as permitted sender)
MIME-Version: 1.0
Date: Thu, 1 Dec 2011 20:30:45 -0600
Message-ID: 
 <CACGXvK1CT5Ztdx3x8Ga4Wmke2tE0zNt0EgCYvm6u5NTTqeTN2A@mail.gmail.com>
Subject: Form-based Login question
From: Jerry Malcolm <2ndgenfilms@gmail.com>
To: users@tomcat.apache.org
Content-Type: multipart/alternative; boundary=20cf300fb2b5903c8604b312c1f8

--20cf300fb2b5903c8604b312c1f8
Content-Type: text/plain; charset=ISO-8859-1

I have been using form-based auth for several years.  I understand the
challenge concept where TC puts up the pre-defined login page when the
first page requiring auth is requested.  But I have a slightly different
situation.  I want all of my non-protected pages (guest-level) to include
the id/pw fields at the top of the page.  At any time when the user chooses
to go to the protected area of the site, they enter their id/pw and hit the
login button and it takes them to a page in the protected area.  Basically,
I want to bypass the forced login page if the user entered an id/pw unless
obviously the auth failed on the provided id/pw.

Is there a way to 'force' provide credentials under the covers at the time
the first protected page is requested to get the user signed on without the
intermediate login form appearing?

Thanks.

Jerry

--20cf300fb2b5903c8604b312c1f8--