]
Darran Lofthouse reassigned WFLY-11131:
---------------------------------------
Assignee: (was: Darran Lofthouse)
@LoginToContinue.errorPage doesn't work for pages in WEB-INF (New
Java EE 8 Security)
-------------------------------------------------------------------------------------
Key: WFLY-11131
URL:
https://issues.jboss.org/browse/WFLY-11131
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 14.0.1.Final
Reporter: Instantiation Exception
Priority: Major
I have this configuration:
{code:java}
@FormAuthenticationMechanismDefinition(
loginToContinue = @LoginToContinue(
loginPage = "/WEB-INF/account/login.xhtml",
errorPage = "/WEB-INF/account/login.xhtml?error=true"))
@ApplicationScoped
public class SecurityConfiguration {}
{code}
When I open browser and go to restricted page, I am forwarded to login page. Then I input
invalid username and password and submit form (action="j_security_check"). My
browser sends me redirect to
http://localhost:8080/WEB-INF/account/login.xhtml?error=true.
I believe it should forward request to /WEB-INF/account/login.xhtml?error=true because
standard FORM login-config in web.xml worked this way.