After you get the valid login, stick the username and password into the session and then
have the filter validate that on every subsequent request into the web server.
It doesn't get put into the http request session automagically, you gotta make it
happen.
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4238642#...
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...