tag:blogger.com,1999:blog-591744930960839717.post952934300530417319..comments2009-04-05T10:53:56.296+01:00Sweetxmlhttp://www.blogger.com/profile/05239249371767955354noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-591744930960839717.post-35440566703543218982009-04-05T10:53:00.000+01:002009-04-05T10:53:00.000+01:00Hi Jeremy<BR/><BR/>Thank you for pointing that out. I didn't know that tomcat doesn't invoke handlers when using <A HREF="http://www.onjava.com/pub/a/onjava/2002/06/12/form.html" REL="nofollow">Form-based authentication</A>. <BR/><BR/>I haven't tried that out myself, but I guess that a workaround could be to handle session through URL's in the first step after authentication or swap to a handler-based login like <A HREF="http://securityfilter.sourceforge.net/" REL="nofollow">SecurityFilter</A>.<BR/><BR/>Best regards<BR/>BrianSweetxmlhttp://www.blogger.com/profile/05239249371767955354noreply@blogger.comtag:blogger.com,1999:blog-591744930960839717.post-37157022592223777842009-03-26T21:46:00.000+01:002009-03-26T21:46:00.000+01:00Ah, if only it were so easy. The filter doesn't work on login, which is when you're sending the session cookie.<BR/><BR/>http://faq.javaranch.com/java/ServletsFaq#7Jeremy Steinhttp://jeremystein.com/noreply@blogger.com