At the moment the code assumes the login and error pages are outside the secured area.
It think it makes sense to change this so that the login and error pages are never
secure.
Stuart
----- Original Message -----
From: "Bill Burke" <bburke(a)redhat.com>
To: undertow-dev(a)lists.jboss.org
Sent: Saturday, 17 August, 2013 7:30:30 PM
Subject: [undertow-dev] loginPage and security constraints
If you have a authentication security constraint set to "/*", how do you
make sure you don't have an infinite redirect loop with the loginPage?
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
undertow-dev mailing list
undertow-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev